Author Topic: Working ScriptSafe and uMatrix inside Google Chrome.  (Read 4942 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Working ScriptSafe and uMatrix inside Google Chrome.
« on: April 04, 2015, 01:49:27 PM »
To those that know how to protect themselves,

These two extensions are the best in-browser-security related extensions that came to be installed into the Google Chrome browser and the combination can be compared to the No-Script and Request Policy add-on combination for firefox.
For working both extensions you do not need rocket science, but if you want to surf dumbed down on full automatic clicking after anythings that shows up on the browser screen to completely work your PC or laptop into a doorstopper only state, please do not read on. When you trust others to take care of your browser security and you do not want to have anything to do with it, this posting is not meant for you.
For the others, this is not too hard. First know where you are going, whenever you are visiting a link from a search page that is not alerted as suspicious (Avast Online Security warning,  Bitdefender Traffic Light alert, DrWeb URL checker warning, Google Safebrowsing or Yandex blacklisting alert or privacy alert) or when you visited a website before work ScriptSafe green and allow the main site and block third parties or allow third parties also when that is needed for the full functionality of that page (else leave these blocked), for uMatrix you follow a likewise procedure, only click there if you need additional blocking or when you need more functionality on a certain secure webpage.
Rule 1 when you get an alert from Avast Online Security or the Avast Shields or Bitdefender TrafficLight extension or DrWeb's or Google Safebrowsing or Yandex alert, do not go to that destination and do not visit that website. When you are a responsible guy or gal report the link with hxtp or wXw so the unaware cannot get infected by clicking a live link. We have section for that here on the forums; the virus and worms or report to virus@avast.com.
Really folks, these two extension can be learned to be toggled and the additional bonus is advanced security (you can block any frame, any script you like inside the extension), more insight in what threatening things can arrive at your browser from the Interwebs and additional privacy by blocking scripts that try to track you with analytics, ads, widgets etc.
Install ScriptSafe and uMatrix from the Google Webstore https://chrome.google.com/webstore/detail/scriptsafe/oiigbmnaadbkfbmpbfijlflahbdbdgdf
and
https://chrome.google.com/webstore/detail/%C2%B5matrix/ogfcmafjalglgifnmanfmnieipoejdcf
learn to point and click and enjoy the advanced browser security you have gained through a couple of right toggling clicks.

polonus (volunteer website security analyst and website error hunter)

P.S. An important observation - always toggle uMatrix first and then adjust ScriptSafe, just in that order!
« Last Edit: April 04, 2015, 03:19:47 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Working ScriptSafe and uMatrix inside Google Chrome.
« Reply #1 on: April 04, 2015, 04:38:10 PM »
Users that want to experience a uMatrix-like extension in firefox should try Policeman:
https://addons.mozilla.org/nl/firefox/addon/policeman/
Also support rules based on content type: images, styles, scripts, frames etc.
The purpsoe of the extension is similar to NoScript and RequestPolicy.

When uMatrix comes to firefox, we will be have a hard time to choose between chrome and firefox,
tired a bit of the increasing bloatness of these "googlalities",
but the searching versatility keeps me aboard.

Just look at a youtube website through the eyes of uMatrix with some 248 items that can be toggled.
Google is the Big Tracking machine par excellence.
For that reason I added Stop Tracking -> chrome://extensions/?id=cjadnibdialbplafleaocjllgggfflko
and you won't be tracked any longer.

polonus
« Last Edit: April 04, 2015, 04:40:25 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!