you are viewing a single comment's thread
view the rest of the comments
[–] 69 points 2 years ago (15 children)

I love the paranoia of you nerds. It's valid but idk how you spare the effort.

  • source
  • parent
  • hideshow 15 child comments
  • [–] 77 points 2 years ago* (last edited 2 years ago)

    idk how you spare the effort.

    When you've been building networked systems for longer than JavaScript has existed, it no longer takes effort to spot design choices that put users at risk. When you've watched endless vulnerabilities be exploited over the years, it's not paranoia, but a real-world problem that impacts real people. At that point, the flaws are impossible to responsibly ignore.

    Spreading awareness and showing people how to build safer systems does sometimes get tiring, but I think it's important.

  • source
  • parent
  • [+] 41 points 2 years ago (2 children)
  • [–] 6 points 2 years ago (1 child)

    Relevant XKCD.

    The Polyfill incident is bad (that seems to be how the hackers got into the internet archive), and the OpenSSH one could have been really nasty, if it wasn't caught both early, and by chance (a performance engineer at a major software company noticed).

  • source
  • parent
  • hideshow 1 child comment
  • [–] 24 points 2 years ago (3 children)

    I actually gave up recently for my mental health of all things. Turns out accepting being tracked in just about everything I do but also getting all the benefits of living in the future, without the effort spent on mitigation, is a huge relief. Does Google know my daily routine? Yes. Did they when I had the tin foil hat on? Probably also yes.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 17 points 2 years ago (5 children)

    It's not paranoid to complain about the unnecessity of javascript when all you want to do is read a public text post on a social media platform. I have javascript disabled on some browsers, and it's annoying to have to whitelist a site that really shouldn't need it.

  • source
  • parent
  • hideshow 5 child comments
  • [–] -5 points 2 years ago (4 children)

    Isn't it basically a fundamental underlying technology of the web I don't understand how you can have it disabled and still be able to access modern websites.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 10 points 2 years ago (3 children)

    it isn't. that is html and css, some would argue it's html only.

    javascript is not needed to load a website. It's useful for interaction, and needed to load content separately and dynamically. without it you get a mostly (but not totally) static document like in Office Word

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 2 years ago (2 children)

    CSR exists. You know, WASM CSR websites rely on JS to manipulate the DOM.

  • source
  • parent
  • hideshow 2 child comments