Fuck… this is massively disappointing (yes, i’ll go on the list).
I would turn it off but can you guarantee no autoplaying ads, full screen popups and nasty surprises being delivered through your ad partners? If not then, sorry, it’s staying on and i’ll just block first party scripts.
I love blocker-blockers that can be defeated with basic CSS. If you’ve got Stylish (or a Stylish-alike extension that lets you add custom CSS to specific sites), this’ll bypass it:
body {
overflow: scroll !important;
}
div.fc-ab-root {
display: none;
}
(I’m providing this because adblock is security software just as much as anti-virus and anti-malware software is, and people shouldn’t be asked to disable those to read the news either. This is something BB itself has argued in the past.)
That’s pretty typical of these kinds of warnings. It seems like they are deliberately vague on which URLs and functions need to be whitelisted because they don’t really want people using a granular approach to whitelisting even though that is a best practice for security.
Whitelisting just fundingchoicemessages.google with uMatrix seems to be enough to make the pop up go away - for the moment. But Google/BoingBoing may escalate enforcement at any time.
Let’s say I allow ads and an ad is used as an attack vector to exploit a browser vulnerability, how is BoingBoing planning on reimbursing me for the cost of repair?
I’m using uBlock Origin on both Firefox and Google Chrome. Setting uBlock Origin to disable JavaScript gets rid of the nag dialog. It also has the side effect of blocking YouTube videos, but you can switch to YouTube to see them.
You should try uMatrix by the maker of uBlock Origin. It is completely granular. It has a great UI that lets you control by individual URL, function and also by groups.
Rob has a Google doc he adds the names of people “disappointed in BoingBoing” to. It’s a blanket way of mocking the concerns of people who are critical of any new issue at BoingBoing.
Yeah. With noscript you can just block the scripts but keep objects, fonts, frames etc. but that then stops youtube embeds from loading. But like you say, you have finer control in umatrix and trying it now in pale moon - blocking just scripts for boingboing.net and media.boingboing.net - gets rid of the nag but retains embeds.
For what it’s worth Ive spent $85 in the BB store and purchased hundred of dollars of stuff on Amazon through affiliate links in BB posts. Although not so much in the last few years as the best way to de-clutter my life is to not buy the clutter in the first place.
ETA: I would be ok with a Patreon subscription. I understand it costs money to keep the lights on here. I just don’t want to open myself to the potential threats than can slip through an AD pipe which I learned about on BB of all places.
The brilliant uMatrix UI is the UI the NoScript redesign needed, with the features the author of NoScript claimed couldn’t be implemented due to changes in Firefox.
I entirely agree, the change to noscript since mozilla scrapped the old extensions is a real travesty, whereas ublock origin and umatrix really complement each other quite nicely. Very tempted now to replace noscript with umatrix in firefox.
NoScript has a lot of under the hood protections against cross scripting attacks. I was pretty reluctant to give it up. But the new UI made it nearly unusable for me.