Security → Opera's site hit by Blackhole malvertising, says Bitdefender

said by The Register :

---

Opera has suspended ad-serving on its portal as a precaution while it investigates reports that surfers were being exposed to malware simply by visiting the Norwegian browser firm's home page.

Malicious scripts loaded by portal.opera.com were redirecting users towards a malicious site hosting the notorious BlackHole exploit kit, said a Romanian anti-virus firm BitDefender, which said it had detected the apparent attack on its automated systems. BitDefender said it promptly warned Opera after it detected the problem on Wednesday. It seems likely the scripts had been loaded through a third-party advertisement, a practice commonly known as malvertising.

---

»www.theregister.co.uk/20 ··· ackhole/

AdBlockPlus, and NoScript. A beautiful combination. No Java for the coup de gras.

Which has what to do with Opera?

It has to do with Opera's site, it seems. I use FF with the above.

Opera's site has ads?

So how is Fx+NoScript different from Opera? I have JS disabled globally in Opera. As I recall, from having had Fx+NoScript, one can set per site permissions for JS. Same as Opera.

quote:

---

So what, if you wanted to use Youtube, you'd have to: F12 | Edit | Scripting | Enable (& then refresh the page)?

---

F12 | 'A' | Ctrl+R. Not that bad I suppose.

And if you wanted JavaScript at Opera, you'd have to do the same?

And if you allowed JavaScript at opera.com, JavaScript at that injected page on opera.com, hosted at malwaresite.com, still would not run, is that how it is?

So with Opera you are essentially whitelisting particular sites to begin with, or enabling a site as needed, & then seemingly leaving it enabled (because it gets to be too much trouble to go back & disable)?

And how does that work out on sites that use, need many different domains allowed, like those "cdn" domains, or even the many google domains, googleapis or whatever?

As I recall about NoScript, being asked on every site visit was sufficiently annoying that the user tended to execute the site whitelist option; essentially how Opera works.

quote:

---

F12 | 'A' | Ctrl+R. Not that bad I suppose.

---

Or you could drag a (quite ugly IMO) JavaScript button to the navigation bar. (Though I'd be quicker with the keyboard shortcuts.)

Or use Edit Site Preferences on the context menu.

I prefer sivran 's method. Just a right-click away ...

Right-click, context menu.