Hacker News Reader

Comment by inetknght | Hacker News Reader

> The biggest scare I've gotten is somehow ending up on "colnbase.com" (instead of "coinbase.com").

You might want to install some browser extensions to block content. Then block all content (set to whitelist) and selectively add the sites you know.

If you end up on a new site with some amalgamation of letters that look familiar, the extension will rightfully block it and prompt you whether you want to whitelist or not. Big ole' red flag right there.

Of course it's not foolproof. It is just another layer in the strategy of defense-in-depth.

View on HN

This is such a waste of time to do this for every single site! Especially when it's easier to rely on the password manager in cases like this

What I do is a greater waste of time -- I have a separate browser profile for each individual site that I might log into, and javascript is only whitelisted for that one site in that profile. It's a real pain because whenever my browser adds a new config option, I have to update the settings in each of the ~20 profiles.

It has saved me a few times where some rogue javascript tries to redirect me to some unexpected site, and the destination site simply doesn't load.

I think there's a Firefox extension for this usecase.

Combining that with Multi-account container should make it easier to manage ?

dude what how do you have so much free time my lazy ass just has ublock origin with some lists enabled that my even more techbro help me set up and it automatically stops me from visiting suspicious websites this feels like way too much work

And Firefox is such a pain to automate

I just want every new machine to have my extension settings, but then it's four hours later and I'm trying to check if some policy file was obsoleted in version 60

Such a time sink

Sounds like uMatrix (RIP) with extra steps.

> This is such a waste of time to do this for every single site!

That's your opinion. But it works for me and doesn't take much time at all to wield.

> Especially when it's easier to rely on the password manager in cases like this

Passwords aren't the only thing this helps guard. Password manager won't prevent the site from loading in the first place. So if that site delivers malware then your password manager won't help you.

That's your opinion that it works for you, but more importantly, that it would work for others instead of teaching them to automatically click "yes" after clicking a link to a site they want to visit after having to do this hundreds of times for all those hundreds of sites they had to visit before, so a supposedly big red flag could be nothing more than one of those brown cookie gdpr annoyances

Reply on news.ycombinator.com