Hacker News Reader

d0bbyon Tor Browser disabled NoScript, but can't update

> Turns out an unrelated 3rd party can suddenly remotely disable Tor anonymity protections at their whim, and possibly endanger TBB users (or deliberately help in deanonymizing them).

> remotely disable Tor anonymity protections [!]

Maybe a 'certificate is expiring soon' warning on the browser side?

Users would know and Mozilla would be forced to keep certs valid.

d0bbyon The inception bar: a new phishing method

I like how this is a trend now, fake popups, fake url bars.

Maybe _unique_ browser designs would help users.

d0bbyon Don't Talk to the Police – James Duane

Giving your license/id when asked does not need talking...

Jk, ofc you need to talk, for example to explain that you won't answer questions because you have the right to do so.

d0bbyon Ask HN: What email client do you use?

Yeah mutt is pretty awesome... but since many mails these days are html you'll go through some trouble!

d0bbyon Adblock Plus filter lists may execute arbitrary code in web pages

> My hunch tells me this is not good.

After some clicking I found this: https://github.com/uBlockOrigin/uAssets/issues/4080#issuecom... , might be interesting

d0bbyon Adblock Plus filter lists may execute arbitrary code in web pages

People are talking about uBlock Origin...

I really like it, no doubts it's good and everyone should consider using it.

BUT, since we are talking about uBlock Origin, I'd like to mention another awesome extention Raymond Hill made.

uMatrix (https://github.com/gorhill/uMatrix)

uMatrix alone is very powerful, and will prevent most ads.

Yes you as a user need to do the work, but the result is better.

If you like the idea of uMatrix, you may also look at NoScript!

Actually, I live almost ad free using NoScript + uBlock Origin for at least 2 yrs.

$rewrite... what a dumb feature btw!

d0bbyon Password Reset and Web-Cache Poisoning (and a Little Surprise in RFC-2616)

"How does a deployable web-application know where it is? Creating a trustworthy absolute URI is trickier than it sounds. Developers often resort to the exceedingly untrustworthy HTTP Host header (_SERVER["HTTP_HOST"] in PHP)"...

d0bbyon How many hours do you reCAPTCHA per week?

I'm using it with a VPN rn, it's working fine. But yeah using a VPN/TOR increases the risk profile (or whatever they call it). It even slows down the animation of loading new images, it drives me crazy.

d0bbyon How many hours do you reCAPTCHA per week?

I'm trying it out right now. Works! I heard about people using Googles Speech-to-Text to solve the audio challenge some time ago... ty for showing this 1!

d0bbyon How many hours do you reCAPTCHA per week?

I'm trying to do so too, but it's hard. But it's hard to find alternatives for some sites...

d0bbyon How I raised $10M in venture capital

d0bbyon [dead]

"Europe-wide protests are planned to take place on 23rd of March" See you there! ;)

d0bbyon Fanboy’s Anti-Cookie Filters – will remove cookie and privacy warnings

Very very nice, some new filters.

d0bbyon A JavaScript-Free Front End

Need to bump this. I hate JS.