[buug] !*%@ javascript

[Rick Moen]

Quoting Tony Godshall (togo at of.net):

> I use noscript and ghostery together and trust noscript
> to filter out the xss and csrf and ghostery to manage
> the blacklists.  good enough for me for now.

People should be aware that Ghostery is proprietary software.
http://www.ghostery.com/terms :

  The Services and Software are protected by copyright laws and
  international copyright treaties, as well as other intellectual property
  laws and treaties. GHOSTERY or its licensors shall retain ownership in
  and to the Services (excluding the Content) and Software, and to all
  related intellectual property rights, including without limitation
  trademarks, trade names, database rights and patents. You are granted
  only a limited right to use the Services and Software subject to the
  Terms. 
  GHOSTERY hereby grants to you and you fully accept, upon delivery, a
  personal, limited, non-exclusive and non-transferable right to use the
  Services.  [...]
  GHOSTERY may terminate this agreement and your use of the Services at
  any time, without cause and without notice.

Personally, I would not outsource any aspect of my security and privacy
to some company run by people I don't even know.  Your Mileage May 
Differ.<tm>

I track interesting Firefox extensions (e.g., AdBlock Plus, Noscript,
Request Policy) here:
http://linuxmafia.com/~rick/faq/index.php?page=kicking#linuxbrowser

My slides and lecture notes from my Feb. 2011 talk about 'Web Browser
Security, Performance, and Privacy':

http://www.svlug.org/prev/2011feb/svlug-lecture-2011-02-02.pdf
http://www.svlug.org/prev/2011feb/svlug-lecture-2011-02-02.txt