3 ms·
Why should we trust any website and execute their JS code on our machine? What about privacy, if they decide they can track us and sell the information to whoev
by marklgr 10y ago
Why should we trust any website and execute their JS code on our machine? What about privacy, if they decide they can track us and sell the information to whoever they want? And even if they're "legit", what about the 3rd parties they might trust wrongly?
- Biganon 10y agoHonest question : what harm could possibly be done by Javascript?
- zeveb 10y agoRemote code execution for one: https://oreoshake.github.io/xss/rce/bugbounty/2015/09/08/xss-to-rce.html https://oreoshake.github.io/xss/rce/bugbounty/2015/09/08/xss...
- Crespyl 10y agoWhat's more, rowhammer can be done from js: https://github.com/IAIK/rowhammerjs https://github.com/IAIK/rowhammerjs