Hacker News Reader

First thing i did after installing was disable updates, i should be fine for a while. -Another thing that is becoming more difficult to do in FF.

View on HN

> First thing i did after installing was disable updates, i should be fine for a while.

That's a really dangerous thing to do for a piece of software that's made to run untrusted code on your system!

NoScript; My browser only runs trusted code on my system. And if you are running an updated browser without NoScript or some equivalent, that's very dangerous.

Sure, NoScript makes the danger less significant, but it's still not as good as NoScript+updates. Security bugs in media decoders are fairly common, so there are still plenty of opportunities for danger if your browser is old enough.

But since browser JavaScript engines are some of the best sandboxes in existence due to being constantly tested and updated, not using NoScript really isn't dangerous. Sure, disabling JS reduces the amount of risk, but that amount is already low enough to be tolerable for most people.

Waterfox is owned by an ad network for more than an year

Reply on news.ycombinator.com