6 ms·
> Above all, what’s dangerous about JavaScript is that it is executed without the user’s knowledge or consent. Ummm ... is this not how all software works? Is
by Archanian 9y ago
> Above all, what’s dangerous about JavaScript is that it is executed without the user’s knowledge or consent.
Ummm ... is this not how all software works? Is the average person 'aware' of the code that is executing as he/she clicks around in any piece of software? How is a web browser any different?
- dplgk 9y agoAgreed. When a user opens Microsoft Word, billions of lines of code are executed without supposed consent.
- krapp 9y agoNot to mention when your operating system likely updates itself, when you import new dependencies from a repo, when any software is updated to a new version by any means other than the user recompiling from source, etc. It happens all the time but for some reason, it's more evil when it's javascript.
- kazinator 9y agoErgo, "Let's Replace MS Word with Something Better". JS is much more foisted upon users than MS Word ever was.
- kazinator 9y agoHow a web browser is different is that simply by stumbling into some web site, your browser is suddenly loading code from ten other domains. The current version of all that code, not the one the site tested with. No signatures are checked; for none of those sites is there a validation whether it came from a trusted publisher and a prompt to install it. With regular software, you explicitly download and install and in newer operating systems, there are certificates and signatures to give some modicum of protection. If you install something unsigned, you give your explicit consent.