3 ms·
I'm not doubting that JS creates a greater attack surface. I'm doubting the realism of the treat. There are billions of people using browsers with JS enabled
by sonnyblarney 7y ago
I'm not doubting that JS creates a greater attack surface.
I'm doubting the realism of the treat.
There are billions of people using browsers with JS enabled and I don't see serious concerns / problems as a result of it.
Where are the examples of Chrome being compromised by arbitrary JS scripts, out in the wild, wherein people have been affected?
Banks, insurance companies, security agencies - everyone is running browsers with JS enabled, so I don't see any reason to believe that it's a legitimate problem.
- Sir_Cmpwn 7y agoThe problem is less related to typical petty crime, but more about state actors hoarding vulnerabilities imo. State actors have already been shown exploiting JavaScript-related vulnerabilities in Tor to deanonymize pedophiles, for example.
- sonnyblarney 7y agoBeing de-anonymized by state actors snuffing out child predators is not a concern for most people.