Pages

Showing posts with label opera security. Show all posts
Showing posts with label opera security. Show all posts

Monday, November 14, 2011

NotScripts Brings Firefox NoScript Protection To Opera

When it comes to add-ons, the noScript add-on for the Firefox web browser is my favorite one. It basically blocks script from running on domains until I allow them to run. NoScript offers more functionality than that like XSS protection among a plethora of others. I have covered the Google Chrome extension NotScript in the past which offers a somewhat limited NoScript experience on that browser. And Swapnil (thanks) just informed me that Opera too has a NotScript extension available.

NotScripts is available for Opera 11.10 or newer. the installation process is a bit on the complicated side. Here are the instructions on how to install NotScripts correctly.

  • Install the extension. You can install the latest NotScripts version right from the Opera Extensions repository.
  • Close the Opera window and re-open Opera.
  • Click the NotScripts button in the Opera toolbar.
    It would show you a message saying you to set User JS Storage Quota to 5000. Click the message and it will take you to the ‘User JS Storage Quota’ setting.
  • Change the value of the setting from 0 to 5000.
  • Click the Save button. You might need to scroll down to find the Save button.
  • You may need to restart the Opera browser before the changes take effect.

Opera’s Notscript, unlike NoScript comes with three different script blocking mode. The default mode is whitelist which blocks all scripts except those that are run from whitelisted domains. Blacklist, the other option allows all scripts by default and blocks only scripts on a user maintained blacklist (much like the Firefox add-on YesScript). The last mode Whitelist + Same Origin uses the whitelist approach to block all scripts but allows scripts running on the same domain the user is on automatically.

So more choice in this regard which is really nice. When you visit a site you need to click on the NotScript icon to display the list of blocked scripts. There is no indicator that scripts where blocked which is probably the biggest usability issue. A click on the icon displays the scripts which options to allow, block or temporarily allow them individually.

blocked-scripts

If you run the blacklist mode (allow all scripts except selected ones) then you see a script listing similar to that on the screenshot above. The blue action is the current one for that script on that particular site. Just like with NoScript you can allow all scripts, globally allow all temporarily until revoked or temporarily allow the shown scripts.

NotScript seems to work considerably well. I have two big gripes with it. First the missing notification as it is a guess game if a script has been blocked or not and second that the developer has not updated the script in a while (the last update dates back to April 2011).

The extension itself works and that’s the most important aspect obviously. It is not a 100% port of NoScript but a port that brings the most important feature of the Firefox security extension to Opera. For that, it is highly recommended to be installed.

An alternative to that is the Opera NoScript Alternative BlockIt which I have reviewed in the linked article.


© Martin Brinkmann for gHacks Technology News | Latest Tech News, Software And Tutorials, 2011. | Permalink |
Add to del.icio.us, digg, facebook, reddit, twitter
Post tags: , , , , ,



Wednesday, October 19, 2011

Opera 11.52 Security Update

The Opera desktop team has released an Opera web browser update that resolves two security issue. The update fixes a non-exploitable security issue that “allowed injection of untrusted markup into the X-Frame-Options error page” and a “issue where manipulating fonts in SVG could allow execution of arbitrary code”.

The second o-day security issue has received a critical severance rating as it can be used to crash the web browser and execute arbitrary code on the system.

Users running the latest stable version of the Opera web browser, which is 11.51 at the time of writing, should receive automatic updates right away.

It is alternatively possible to check for updates manually by clicking on Opera > Help > Check for Updates. The new version is also available for download at the official Opera website.

opera update

The new Opera version comes with stability enhancements as well. Opera 11.52 fixes a issue on YouTube where adjusting the volume on playing HTML5 videos could freeze the web browser. It furthermore fixes a issue where BitTorrent downloads would lead to a crash of the web browser.

It is likely that Opera 11.52 is the last 11.xx version of the browser. The development team has recently released Opera 12 alpha which showed improvements all over the board. The new version introduces new technology support. This includes support for WebGL and full hardware acceleration.

Tech enthusiasts interested in this development version of the browser can download it directly from the Opera desktop team blog.


© Martin Brinkmann for gHacks Technology News | Latest Tech News, Software And Tutorials, 2011. | Permalink |
Add to del.icio.us, digg, facebook, reddit, twitter
Post tags: , , ,