Print Topic
Computer Q&A Board / Other Programs / Script Prevention
Posted by: Slim Jim, June 8th, 2006, 12:46pm
Do readers of this forum think script prevention is a good idea? I've heard pro and con, and would like to hear additional comments. ....On my two
laptops, I've installed the following two programs - one on each computer:
NoScript (
http://www.noscript.net/whats) and ScriptTrap
(
http://keir.net/scriptrap.html).
As one of the authors state: "Scripts are small programs that are written
in a variety of simple computer languages. They can perform useful functions but they can also be used for less useful and sometimes damaging purposes, the prime examples being computer viruses and trojan-horse programs."
Both these programs seem to work well, but NoScript seems to have more features. I like the added protection they offer, and they don't seem to place a load on the computer.....I don't know, at this time, too much about scripts, and I'd like to hear your input. Thanks....SlimJim
Posted by: Ray, June 9th, 2006, 12:18pm; Reply: 1
NoScript in one place says that it blocks JavaScript (which I am not sure if JavaScript can even infect a computer with a virus) and in another place it says Java and JavaScript. Maybe the makers of NoScript do not realize that there is a difference. Or maybe it is the writers of that webpage that don't know a difference. Java is a programming language. I would not classify Java as script. JavaScript, on the other hand, is certain commands or scripts that are put in webpages. If NoScript is just blocking Java and JavaScript it is not giving you much protection because there are many more programming languages than Java and other scripts than JavaScript.
My first reaction to your post was that I have never heard of a virus being distributed by script. What webmaster would put a script on his website with the sole purpose of infecting visitors with a virus? Then I read ScriptTrap's description and that is not really what ScriptTrap does. ScriptTrap blocks any program from automatically running on your computer. I would not call that script prevention. To me script prevention implies that it is coming from a website that you are visiting.
A few years ago the popular programs were programs that blocked email attachments. This seems to accomplish the same thing. Maybe they just change the terms every few years to sell more programs.
Anyway, doesn't an antivirus program do the same thing?
I have always just not opened those email attachments (which is the main virus distribution tool that ScriptTrap describes and blocks). If a person is stupid enough to open email attachments, don't you think that he would also click on Yes when ScriptTrap gives a warning and asks if he wants to run the script anyway?
Maybe I am wrong, but to me this seems to be another attempt to exploit people's overblown fear of viruses.
Posted by: Saint Satin Stain, June 17th, 2006, 6:29pm; Reply: 2
You are right about Java and Javascript. My default in ZA is to block anything in a webpage, cookies, ads, Java, everything except JavaScript. The danger from JavaScript is minimal, except for the irritating use by ad folk. I prevent these extensions from running: .HTA, .HTW, .IDA, .IDC, .IDG, .JS, .JSCRIPT, .JSE, .PRINTER, .SHA, .SHB, .SHS, .SHS, .VBA, .VBE, .VBS, .WSC, .WSF, .WSH. Ray and some of you have been around a long time in computer years and know that some of these extensions are almost extinct. I do have a paranoid list. It is over the top.
These are my individual dangers:
ants3set.exe
BadGirl.exe
blanca de nieve.exe
Boss Game.exe
Boy and Girl.exe
Cheat.exe
Choose Games.exe
Click Me.exe
DVLDR32.EXE
dwarf4you.exe
enano porno.exe
explorer.doc
GoodGame.exe
Happy New Year.exe
Happy.exe
happy99.exe
Krnl132.exe
life_stages.txt.shs
links.vbs
love-letter-for-you.htm
love-letter-for-you.txt.vbs
Make More Money.exe
Merry.exe
movie.avi.pif
MP3.exe
Music.exe
My Letter.exe
My Picture.exe
My Resume.exe
network.vbs
PenHouse.exe
PlayBoy.exe
pretty park.exe
prettypark.exe
Question.exe
sample.exe
scam32.exe
Sex Picture.exe
sexy virgin.scr
sirc32.exe
south park.exe
TEEKIDS.EXE
True or False.exe
tune.vbs
winext.exe
zipped_files.exe
Scripts can do mostly mild malicious things and some malicious things. Some of the baddies that ScripTrap, ScriptSentry, and others are not scripts but common and easy things to use. They basically protect you from script kiddies. If Ray were evil the internet would be in danger. He really belongs on the podium with John Barlow, Zimmerman, Bruce Cogswell, Gizmo Richards, and other almost saints. I don't believe in saints. You basically need router/firewall, software firewall, antivirus, antiTrojan, a couple of antispyware, one antirootkit, and a HIPS. Actually the last has been improved upon with CIPS.
Posted by: Slim Jim, June 19th, 2006, 8:47pm; Reply: 3
Ray and Saint, thanks much for your comments on scripts. Very helpful to me as I didn't know anything about scripts...Thanks again......Jim
Posted by: Saint Satin Stain, June 24th, 2006, 4:22am; Reply: 4
Print page generated: December 2nd, 2008, 11:27pm
Powered by
E-Blah Platinum 9.6 © 2001-2006