-
I find uBlock enough by itself.
But... I caveat that with my browsing habits very likely being different from yours.
If you run a single non-incognito window for everything, I'd probably still consider NoScript.
What I do (desktop):
- Chrome = Things I trust a lot: Gmail and Google drive, etc and LFGSS. Nothing else.
- Chrome Incognito = Things I trust a little: All social media (Twitter), sites I sit on most of the day (Hacker News), some news sites (BBC)
- Firefox in forced Private Browsing mode = Everything else.
I literally receive a link in an email, and will copy it to the right browser to open it. I only click links that stay within the realm of trust in which I'm working.
On my Android phone the above is replaced by:
- Chrome = Things I trust: LFGSS
- Firefox = Things I trust a little (uBlock Origin works, but no private browsing by default so I'm selective about what I open in Firefox)
- Dolphin Zero = Everything else (all browsing data thrown away after viewing each page)
I find compartmentalisation is pretty good even when I do stray into horrible stuff, but this doesn't necessarily protect me against malware which NoScript would. But, as a Linux user running uBlock I think I've mitigated that risk enough to browse without worrying too much about it.
If I were not compartmentalising my browsing by trust, then I'd definitely be a bit more paranoid about things.
The risks I see are mostly an untrusted site, somehow exploiting something in a trusted site... hence compartmentalising.
- Chrome = Things I trust a lot: Gmail and Google drive, etc and LFGSS. Nothing else.
I'm currently running Ublock and Noscript (from when I was using Adblock and Noscript and Ublock replaced Adblock).
Overkill do you think or worth using both?