As the web becomes ever-increasingly littered with excessive JavaScript, Flash, Java, websites that won't even let you browse without enabling cookies, etc., users may be increasingly tempted to lower the security of JonDoFox by enabling such things globally. Additionally, such things may be temporarily globally enabled for troubleshooting (e.g. when trying to use a website that will not work without third party cookies) or when loaning one's computer to a guest who does not care about privacy. Additionally, a user may use a social networking site which will then track them even after they have left the social networking site and gone elsewhere.

However, there are many sites serving cookies, javascript, flash, java, and other rich media exclusively for advertising and tracking purposes, which provide no useful functionality.

I therefore suggest the following changes to JonDoFox.

Include the following filters in AdBlockPlus in addition to Easylist and Easylist Germany:
* EasyPrivacy. This was previously in JonDoFox. I am not sure what it was removed?
* Antisocial. Prevents tracking by social networking sites.
* Additionally, Windows users not using an active firewall may wish to download the Malware Domains filter.

Include a longer untrusted list in NoScript. Here is my noscript.untrusted:


Include a list of websites to never allow cookies from. I use this list:
http://prxbx.com/forums/showthread.php?tid=1138
I additionally added facebook.net, google-analytics.com, googlesyndication.com, and scorecardresearch.com.
The list is stored in permissions.sqlite. I can e-mail mine to the JonDos team if they like this idea.

If these blocklists are included in JonDoFox, it will make it a little less damaging for users to voluntarily reduce their security by temporarily or permanently enabling cookies, JavaScript, etc. globally.

We will have a talk about your recommendations next week. Thank you!

Danke!

We are planning for the next release to ship one list with JonDoFox and include the relevant AdBlock functionality in our extension itself. I.e. AdBlock won't be included in our profile anmyore soon. I will look into building a list out of the ones you mentioned above but am tending at the moment only to include EasyList, EasyList Germany and EasyPrivacy in order to minimize the maintenance work and to avoid incompatibilities that may arise if you have lot's of different lists and exceptions on them.
We won't do this for three reasons. First, if we would include such a list a lot of users would not be able to allow those scripts anymore even on a temporary base (maybe they need them for some reason) and would complain about that. Second, as a matter of fact almost nobody is reading a CHANGELOG. Thus, if we change the blocking list slightly (adding or removing items) users are still thinking it behaves as usual and are probably encountering all sorts of unexpected behavior which does not really look as a feature. And third, security is usually not something you get by blocklisting this. Rather, you have to change your habits (as well). That's why I think it is more productive in the long run to teach the users to enable scripts selectively and only temporarily if they need them and have them forbidden otherwise.
We won't do this either. The arguments given above apply here as well.