Rated 2 out of 5 stars

by John Lucifer on April 28, 2009 · permalink

Just as WOT (Web Of Trust), YS (YesScript) is another wonderful Anxiety Drug.
There are 2 kinds of bad scripts. One is badly coded script but obviously harmless, one is malicious script, mostly well-coded. YS deals with the former while NoScript blocks the latter. Why the differences?
YS bases on users' keen eyes. But would a user know a malicious script when seeing it? Or YS would becomes a localized version of WOT? So a normal user browses a website and thinks: "Eek, this page works badly, let's block it". That's good, ugly website should be blocked for sure.

BUT THERE IS NOTHING TO DO WITH SECURITY HERE.

I rather say YS is good as a "subjective opinion-based script-blocking" but not as a security extension.

PS: Yes, NoScript is not for newbies since it's 'complex' and quite not a "ready to use after installing" piece. But it's quite not troublesome when browsing if you configure it properly from the start. Nothing is free, security comes at the cost of a little gray matter :)