| When you say you don't allow script, cookies, 3rd-part images, or flash,
where do you turn
| those off in IE8?
|
Script: Tools -> Internet Options -> Security tab ->
Internet zone
Flash: In IE that would come under ActiveX settings.
Cookies: Tools -> Internet Options -> Privacy tab
(You can also set cookies by domain there.)
3rd-party images is something that can be disabled
in Mozilla browsers. It's not a setting in IE.
IE settings are difficult. There are a lot of them.
In other browsers you can enable or disable script
with one click. In IE there are several script settings
and several ActiveX settings in each security "zone".
Probably the easiest option is to disable script,
ActiveX, etc. in the Restricted Zone -- disable all
of it completely -- then assign websites there. For
instance, you could assign yahoo.com there and see
if it still works OK. You can do the same in the cookie
settings. If a particular site doesn't work without
script you can then remove it from the Restricted Zone.
Or you could do it the other way: Disable everything
in the Internet Zone and then choose slightly more
flexible settings for the "Trusted Zone". You can then
assign to the Trusted Zone only those websites that
absolutely won't work in the Internet Zone.
Are you familiar with the zones and security settings?
If not then it's hard to explain. IE settings are exremely
complex and convoluted. Microsoft has gone to great
lengths to ensure that very few people will ever understand
IE settings.
I actually wrote a free, fairly new program recently.
It's a plug-in for IE:
http://www.jsware.net/jsware/jspagefilt.php5
jsPageFilter. It allows you to control webpages in great
detail, filtering anything you like on a per-domain basis.
I wrote it partly for blind people, because a lot of sites
don't work well at all for the blind. I have a friend who's
blind and noticed that he has great difficulty maneuvering
around the typical, bloated website these days. But the
program is also designed for anyone who wants better
control of security and privacy in IE. (These kinds of controls
are already partially available in Mozilla browsers, but the
settings are obscure. In IE, controlling the details of a
webpage have never been available at all.)
jsPageFilter is a type of plug-in known as a mime filter.
Microsoft provides mime filter functionality so that
corporations can write software to edit webpages before
they reach employees. Mime filters are also used for
parental controls. The way they work is that the webpage
is given to the mime filter by the downloading function in IE.
The mime filter can then do anything it wants with the
webpage, and give anything it wants to the browser! It's
a middleman. (For instance, a parental control mime filter
might eliminate JPG images from webpages other than
Sesame Street, in order to avoid kids seeing porn.)
jsPageFilter takes that functionality and
provides an interface for it, so that anyone using IE can
create any sort of filter they want, on a per-domain
basis. (It's a good example of why IE is *so* good and
also *so* bad. On the one hand, I was able to write this
webpage filter because IE is so flexible. On the other hand,
any malware could be running IE through such a filter
right now and you wouldn't have any easy way to know it.)
If you don't want to use extra software like jsPageFilter
then assigning websites to the Restricted Zone is the closest
you can get to controlling script, ActiveX, etc.
The closest thing in IE to blocking 3rd-party images
is to use a HOSTS file.
http://www.jsware.net/jsware/cook.php5#hosts
It's safe. It's fairly easy. And since most ads are actually
coming from one of a few very large ad servers, it's not
hard to eliminate nearly all ads from webpages. That also
can eliminate privacy intrusions from Google/Doubleclick,
Microsoft/AQuantive, and various other giant ad companies
that follow you around the Web by using their ubiquitous ads
as tracking devices. (Note, however, that simply having
3rd-party ads on a webpage, though intrusive and usually
visually calamitous, will not cause IE to go into a high CPU
usage state.)
Some people believe that it's wrong to block ads because
websites need them to make money. But blocking 3rd-party
images does not block honest ads... ads that are actually
part of the website. They only block web-beacon spyware
ads from large ad servers that you never chose to visit in
the first place. (If you visit somewhere.com, that doesn't
give somewhere.com the right to make you visit doubleclick.com,
but that's essentially what 3rd-party ad images do.)
Sorry to go on so long. This is a *very* big topic. Getting
even modest control over security, privacy and loaded objects
in webpages is very difficult to do without knowing at least
the basics of how it all works.