4 ms·

Just out of curiosity, why do you have JavaScript disabled?

by andreashansen 10y ago

somecallitblues 10y ago
Im interested in this too. Why?
mehaveaccount 10y ago
Security
- xutopia 10y ago
  How is having Javascript enabled less secure?
  - ianhowson 10y ago
    Greater attack surface.
    - axonic 10y ago
      Yeah, like doors or Windows in your home. Take it however you like.
      - progval 10y ago
        A home without doors cannot be used. A browser without Javascript can be.
progval 10y ago
General reasons for using NoScript: security (js sandboxes are not flawless), privacy (brower fingerpring [1][2], Sniffly [3], ...), less CPU usage, less UI bloat (modal popups, blinking stuff, ...; although I have to manually whitelist some websites). [1] https://amiunique.org/ https://amiunique.org/ [2] https://github.com/ben174/hsts-cookie https://github.com/ben174/hsts-cookie [3] https://github.com/diracdeltas/sniffly https://github.com/diracdeltas/sniffly
- sedachv 10y ago
  Great summary. I recommend uMatrix (https://github.com/gorhill/uMatrix https://github.com/gorhill/uMatrix) which has really good controls for toggling not just JavaScript but also cookies, XHR, frames, etc for origin and 3rd party/cross-domain requests with per-site settings. A lot of websites that need JavaScript will still work if you enable loading of scripts from the origin domain but leave things like Google Analytics, etc, from other domains blocked. uMatrix is also easier to use and has a much smaller footprint than ad blockers.
anotherturn 10y ago
I also have javascript disabled, and selectively enable it for websites as required. For me it's less about security and more about disabling annoyances e.g. assisted scrolling and such. On the security point, there are some answers out there relating to javascript in tor [0]. Basically it's not a risk per se, but it does increase your risk surface area. [0]:https://security.stackexchange.com/questions/40620/why-is-javascript-disabled-in-the-tor-browser-bundle https://security.stackexchange.com/questions/40620/why-is-ja...

Just out of curiosity, why do you have JavaScript disabled?

somecallitblues 10y ago

Im interested in this too. Why?

mehaveaccount 10y ago

Security

xutopia 10y ago
How is having Javascript enabled less secure?
- ianhowson 10y ago
  Greater attack surface.
  - axonic 10y ago
    Yeah, like doors or Windows in your home. Take it however you like.
    - progval 10y ago
      A home without doors cannot be used. A browser without Javascript can be.

progval 10y ago

General reasons for using NoScript: security (js sandboxes are not flawless), privacy (brower fingerpring [1][2], Sniffly [3], ...), less CPU usage, less UI bloat (modal popups, blinking stuff, ...; although I have to manually whitelist some websites). [1] https://amiunique.org/ https://amiunique.org/ [2] https://github.com/ben174/hsts-cookie https://github.com/ben174/hsts-cookie [3] https://github.com/diracdeltas/sniffly https://github.com/diracdeltas/sniffly

sedachv 10y ago
Great summary. I recommend uMatrix (https://github.com/gorhill/uMatrix https://github.com/gorhill/uMatrix) which has really good controls for toggling not just JavaScript but also cookies, XHR, frames, etc for origin and 3rd party/cross-domain requests with per-site settings. A lot of websites that need JavaScript will still work if you enable loading of scripts from the origin domain but leave things like Google Analytics, etc, from other domains blocked. uMatrix is also easier to use and has a much smaller footprint than ad blockers.

anotherturn 10y ago

I also have javascript disabled, and selectively enable it for websites as required. For me it's less about security and more about disabling annoyances e.g. assisted scrolling and such. On the security point, there are some answers out there relating to javascript in tor [0]. Basically it's not a risk per se, but it does increase your risk surface area. [0]:https://security.stackexchange.com/questions/40620/why-is-javascript-disabled-in-the-tor-browser-bundle https://security.stackexchange.com/questions/40620/why-is-ja...