NoScript 🐘 [email protected]

Follow @ma1 for latest news about NoScript and web browser security. Use NoScript to protect yourself against malicious web content.

[NoScript 🐘 [email protected] @noscript]

NoScript's website just got a new tagline for the month.

#pridemonth #pride #privacy #security

https://t.co/SsCSViCIB4

[Giorgio Maone 🐘 @[email protected] @ma1]

I thought it was the usual DDOS spidering fuckery by Bytedance (TikTok) putting @noscript's support forums on their knees, but...
APPLE ENGINEERING, WTF?!!!
"Ambassador" Tim Cook, his new CEO & their minions embracing the dark side really hard 🪱🍏

[Giorgio Maone 🐘 @[email protected] @ma1]

And that's why the dependencies of @noscript + NoScript Commons Library amount to a grand total of 5 self contained, vendored source files.

[NoScript 🐘 [email protected] @noscript]

13.6.6 just out:

- "S" gesture optional & disabled by default
- Enable it in Options>Appearance to skip the new Android Firefox menu 3 taps navigation
- Lowered activation threshold + tooltip to guide the gesture

Thanks for your patience, and your past & future feedback❤️

[NoScript 🐘 [email protected] @noscript]

New "S" gesture for Android in NoScript 13.6.x, along with other less visible improvements in policy enforcement, both in NoScript proper and in the NoScript Commons Library.

https://t.co/zL680txdlK

[Giorgio Maone 🐘 @[email protected] @ma1]

New @firefox for Android menu buries extensions deep down into a click pit. But now you can summon your @noscript quicly by sketching a "S" on the web page😎

[NoScript 🐘 [email protected] @noscript]

@KedaiNasi @firefox @torproject @mullvadnet Are you selectively disabling WASM and/or WebGL? If you are, the debugger is the price for being able to do that effectively in Chromium (including workers/worklets), courtesy of the limitations from Google's Manifest V3 (not needed on @firefox).

[NoScript 🐘 [email protected] @noscript]

Casual reminder about NoScript's mitigations going far beyond selective #JavaScript execution (on @firefox-based browser at least, such as @torproject & @mullvadnet).
#ConsensualBrowsing

[Giorgio Maone 🐘 @[email protected] @ma1]

@I_Am_Jakoby @koroutine It couldn't work in the Tor Browser, neither in the @mullvadnet Browser, because of @noscript's https://t.co/eXVsqD1qIV (independent from #JavaScript blocking, which may help as well).

[Giorgio Maone 🐘 @[email protected] @ma1]

The quick @firefox jumps over the lazy laptop.

[NoScript 🐘 [email protected] @noscript]

📯NoScript 13.5.6 is out!

Main news:
- New option to disable automatic page reloading on permissions change
- Fix quirks mode rendering bug on cold load of pages from file:// URLs

⬇️ https://t.co/zL680txLbi

[NoScript 🐘 [email protected] @noscript]

#NoScript 13.5 is out, with many user experience improvements:
- cascade permissions" mode
- onboarding / site classification behavior panel
- many content #usability and #security enhancements

Special thanks to @OpenTechFund for their strenuous support!

https://t.co/LkGx54bMrs

[NoScript 🐘 [email protected] @noscript]

"We decided to move control of Wasm to @noscript, which bundled with Tor Browser & already manages #JavaScript & other security features.
Wasm now works on privileged browser pages such as the PDF renderer, but NoScript will continue blocking the technology on regular websites"

[The Tor Project @torproject]

🎉 Tor Browser 15.0 is now available! Our first stable release based on Firefox ESR 140, incorporating a year's worth of changes. Download now from the Tor Browser download page: https://t.co/GOt4SHuyuQ

[Lina Khan @linamkhan]

Both disturbing and bizarre.

Why is an administration that says it supports open-weight models and real competition in AI deleting government materials that support its position?

[NoScript 🐘 [email protected] @noscript]

NoScript 13.2.2 is out:
- Works around a a long-standing breakage on Proton Mail
- Erases temporary permissions when last tab is closed on Android, as a work-around for the "Quit" browser menu command actually keeping Firefox alive, even if hidden.

https://t.co/zL680txLbi

[The Tor Project @torproject]

🚨 Double your impact 🚨

Although the modern internet has been corrupted by rampant privacy violations and pervasive government spying, we have the power to FREE THE INTERNET from the chains of censorship and surveillance. ⛓️‍💥

Donate today to take advantage of our match offered by Power Up Privacy and support a free internet. This means a $25 donation will have a $50 impact.
https://t.co/59Yj5ZBkdi

[NoScript 🐘 [email protected] @noscript]

@TheHackersNews "Your WAF can't see this."
My users can (hope they're your customers)😄

[NoScript 🐘 [email protected] @noscript]

"Your WAF can't see this."
My users can (hope they're your customers)😄

[The Hacker News @TheHackersNews]

Your WAF can’t see this.

Attackers are skimming payment data right now through unmonitored JavaScript—while your dashboards stay clean.

The worst part? It’s happening in your customers’ browsers.

See what every retailer must fix before Black Friday ↓ https://t.co/TVkAwe94XU

[NoScript 🐘 [email protected] @noscript]

NoScript 13.1 is out.

- New wasm capability for per-site WebAssembly control

- Fix for some visual breakages where unrestricted CSS is off

- Best effort avoidance of extra tab bars for AI Chatbot sidebar detection

https://t.co/zL680txLbi

[Grok @grok]

Based on reports up to September 2025:

Chrome: 6 zero-days exploited (e.g., CVE-2025-10585, per The Hacker News, SocPrime, and Google updates).

Firefox: 3 zero-days exploited (CVE-2025-2857, CVE-2025-4918, CVE-2025-4919, per Bleeping Computer, The Hacker News, and Mozilla advisories).

NoScript can help mitigate unknown vulnerabilities by blocking JavaScript execution, a common exploit vector (per NoScript docs and security analyses).

[Giorgio Maone 🐘 @[email protected] @ma1]

🔥#chrome #0day actively exploited in the wild.
🦊 Switch to @firefox
🚫 use @noscript
📲 On Android, too

#zerodayattack #zerodayexploit #security

[Giorgio Maone 🐘 @[email protected] @ma1]

@miroyato @Pirat_Nation @mullvadnet @GrapheneOS @brave Since you mentioned @mullvadnet, their Mullvad Browser should be on top of the list: no Google/Chromium/fascist shit, just privacy and security in mind, VPN-optimzed, made by the @torproject 🧅 from a stripped down and hardened @firefox 🦊, with integrated uBlock & @noscript 🚫