Delivery-Date: Tue, 17 May 2016 01:45:21 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.0 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RCVD_NUMERIC_HELO,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 7D11F1E0A03;
	Tue, 17 May 2016 01:45:19 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id A29E33A088;
	Tue, 17 May 2016 05:45:14 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id E5DC83928C
 for <tor-talk@lists.torproject.org>; Tue, 17 May 2016 05:45:10 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 2umq_-aSfrPr for <tor-talk@lists.torproject.org>;
 Tue, 17 May 2016 05:45:10 +0000 (UTC)
Received: from plane.gmane.org (plane.gmane.org [80.91.229.3])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id AE96C36E88
 for <tor-talk@lists.torproject.org>; Tue, 17 May 2016 05:45:10 +0000 (UTC)
Received: from list by plane.gmane.org with local (Exim 4.69)
 (envelope-from <gno-or-talk-2@m.gmane.org>) id 1b2XoV-0001I7-GD
 for tor-talk@lists.torproject.org; Tue, 17 May 2016 07:45:03 +0200
Received: from 46.166.190.204 ([46.166.190.204])
 by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
 id 1AlnuQ-0007hv-00
 for <tor-talk@lists.torproject.org>; Tue, 17 May 2016 07:45:03 +0200
Received: from dafwig by 46.166.190.204 with local (Gmexim 0.1 (Debian))
 id 1AlnuQ-0007hv-00
 for <tor-talk@lists.torproject.org>; Tue, 17 May 2016 07:45:03 +0200
X-Injected-Via-Gmane: http://gmane.org/
To: tor-talk@lists.torproject.org
From: Dafwig <dafwig@sigaint.org>
Date: Tue, 17 May 2016 04:44:34 +0000 (UTC)
Lines: 43
Message-ID: <loom.20160517T055047-415@post.gmane.org>
References: <5739DF0A.1010903@web.de> <20160516172651.GG2654@demorgan>
 <573A2456.9000108@web.de>
Mime-Version: 1.0
X-Complaints-To: usenet@ger.gmane.org
X-Gmane-NNTP-Posting-Host: sea.gmane.org
User-Agent: Loom/3.14 (http://gmane.org/)
X-Loom-IP: 46.166.190.204 (Mozilla/5.0 (Windows NT 6.1;
 rv:38.0) Gecko/20100101 Firefox/38.0)
Subject: Re: [tor-talk] augmented browsing -
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

haaber <haaber <at> web.de> writes:
> Thank you for your answer. I should have mentionoed that I have tried
> Greasemonkey some time ago. But it is javascript based. None of the
> example-scripts worked on a JS-deactivated firefox.  Am I wrong?

This may have been true in the past, but not anymore. i think the original
version of Greasemonkey worked by essentially injecting custom JS code into
the page, so the custom scripts would run in the page's context. Nowadays,
however, Greasemonkey and NoScript work just fine together. I use both every
day.

> A sed / awk whatsoever is at least as powerful, more secure (code tested
> for decades), and easy relatively to use, at least if you want
> to browse JS-free.
> 
> - How to transform JS-enforcing codes like
>   <span class=BS" dara-src="link"> into <img="link"> on the fly?
>   Or codes like [link="[http://..."] into <href="http://...">
> 
> - How add a little openstreetmap into eBay or your favourite private
>    local ads site that indicate the location of an object to sell?
> 
> and so forth. One/two lines of sed suffise in each case. Greasemonkey
> seems to need JS activated (=security hole), and any of the above tasks
> takes 30 lines of code.

It's true that the Javascript code will be longer and perhaps more difficult
to write. On the other hand it will also be more robust for all but the
simplest sorts of preprocessing. I'd be remiss in not mentioning a certain
well-known stackoverflow post:
<https://stackoverflow.com/questions/1732348/#answer-1732454>

As for security, it's true that Greasemonkey scripts potentially increase
your attack surface, especially if you use them on pages that are also
whitelisted in NoScript. You certainly shouldn't install scripts from
untrusted sources, and be very suspicious of anything that uses
unsafeWindow. Simple substitutions like you're describing shouldn't be a
significant risk, though.

I haven't ever heard of a tool like you're describing, but it's not a bad
idea, simpler than writing JS and harder to accidentally compromise your
security/anonymity. Perhaps some sort of combination of regexps and XPath to
get the best of both worlds.

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

