Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Have you found a workable way of doing that?

I manually whitelist in uMatrix, but it's pretty inconvenient and does not stop attacks coming from domains previously whitelisted/deemed safe.



uMatrix is the best I have. I've accepted the inconvenience as minor in comparison; but previous whitelisting is a problem that I actually hadn't considered. I can't think of any reasonable way to prevent that - even catching changed/new scripts and requiring approval to run them won't help if all you can see are minimized scripts.


I guess you could have a kind of crowd-sourced de-minificarion project, combined with checking script hashes, but I think that would be considered a form of pirating and thus require a lot of piracy-related workarounds. Perhaps one could have a de-minification tool which only stores the steps to deminfy a script, and then you could apply it based on the script's hash.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: