#KiwiBank internet banking now comes with DataFarming scripts from 4 different third parties;
* dynatrace.io
* googletagmanager.com
* launchdarkly.com
* qualitrics.com
That's on top of the third-party scripts for the internal notifications, provided by atomic.io.
That's on top of the fact that source code for KB apps is not available to customers under a free license, allowing them to rely on security-by-obscurity instead of security-by-design backed up by peer review.
(1/3)
#NoScript 13.5 is out, with many user experience improvements!
The most visible:
- new "cascade permissions" mode
- the onboarding / site classification behavior panel (in the picture)
- many #usability and #security enhancements regarding blocked content and click-to-play
The greatest thanks(giving) to the Open Technology Fund #otf for strenuously supporting NoScript during the past 2 years, especially through the Manifest V3 compatibility ordeal.
#NoScript 13.5 is out, with many user experience improvements!
The most visible:
- new "cascade permissions" mode
- the onboarding / site classification behavior panel (in the picture)
- many #usability and #security enhancements regarding blocked content and click-to-play
The greatest thanks(giving) to the Open Technology Fund #otf for strenuously supporting NoScript during the past 2 years, especially through the Manifest V3 compatibility ordeal.
Me in 2002: Dillo looks nice, and is way faster than Mozilla, but I don't think I can ever use it as my main browser.
Me in 2025: Dillo go brrrrr! XD
Me in 2002: Dillo looks nice, and is way faster than Mozilla, but I don't think I can ever use it as my main browser.
Me in 2025: Dillo go brrrrr! XD
@futuresprog
> Sign Green's petition to tell the Minister for Rail, Winston Peters, that you want passenger rail services reinstated!
Done. Let's get this to at least 10,000 signatures. Ideally we could get it to 50,000, which is about 1% of the population.
BTW Very disappointed to see the Greens *still* letting themselves be used by NationBuilder to DataFarm their supporters. But at least I didn't have to run the third-party scripts from a NB domain to sign the petition (thanks #NoScript)
Update #1: A user tracked this to having #PrivacyBadger or #uBlockOrigin or #Ghostery extensions installed.
Testing with disabled #uBO made Fennec load pages instantly, but let's be honest, we can't use the Internet without uBlock... 🙄
uBlock issue tracked in: https://github.com/uBlockOrigin/uBlock-issues/issues/3770
Sometimes I need to disable all three of them, sometimes it's just NoScript.
Thanks to the #NoScript plugin I use in my browsers, I just noticed that scripts from at least 2 Goggle domains and at least 1 Cloudflare domain (see screenshots) are being served to people visiting the official enrol to vote website;
https://vote.nz/enrolling/enrol-or-update/enrol-or-update-online/
In the context of the united front formed with the Orange Stalin regime by SillyCon Valley, I find this profoundly disturbing. Official websites should not be serving third-party scripts, especially from known #DataFarmers.
