4 ms·

You're giving sites permission to do this when you browse the web with browser that automatically executes whatever code it is sent. They're not forcing you, yo

You're giving sites permission to do this when you browse the web with browser that automatically executes whatever code it is sent. They're not forcing you, you're going there and you're asking for it and doing it yourself. There's an easy solution. Stop. Don't run JS by default.

harikb 7y ago
OP is simply asking for a compromise, a better solution that yours. Instead of avoiding JS altogether, don’t give it access to things it should never have access / no business mucking around
- TeMPOraL 7y ago
  There's a tension here, though. Having access to things like this is the whole point of having JS in the first place. The web is just full of assholes, so you experience the abuse as often - or even more often - than the proper use of JS. Not sure how to approach it. JS whitelist is a stopgap solution, but not a particularly convenient one, and it doesn't always work.
anigbrowl 7y ago
- This bathtub has a hole in it - Just throw it and the baby away, problem solved
- superkuh 7y ago
  It's not the first time this would be required and done. You probably remember Flash. Once Flash was kicked out Javascript took over it's duties. Only you can't just simply block all JS or expect sites to work without it. JS is worse than Flash now.
  - anigbrowl 7y ago
    I do think some of the ways that js is being abused now are worse than how flash was being abused, but when you get down to it abusive behavior by website owners (and most often, by their marketing departments) is independent of programming languages. It's a business culture problem rather than some flaw in the language design. If everyone stopped using js tomorrow you'd still have people abusing CSS or HTML or the English language to try to undermine or trick people in various ways. It seems to me that we should be directing our efforts towards better browser/OS design and/or more ethical business practices than in largely futile campaigns to make people give up functionality. I'm reminded of some local activists who campaign tirelessly with posters and graffiti to have people stop driving so as to reduce fossil fuel consumption; even though I agree with them and don't drive myself, just telling people to stop is not very helpful without addressing the question of how to solve the problems that people use vehicles for in the first place.
  - joquarky 7y ago
    And it's probably going to get worse with wasm + canvas.

harikb 7y ago

OP is simply asking for a compromise, a better solution that yours. Instead of avoiding JS altogether, don’t give it access to things it should never have access / no business mucking around

TeMPOraL 7y ago
There's a tension here, though. Having access to things like this is the whole point of having JS in the first place. The web is just full of assholes, so you experience the abuse as often - or even more often - than the proper use of JS. Not sure how to approach it. JS whitelist is a stopgap solution, but not a particularly convenient one, and it doesn't always work.

anigbrowl 7y ago

- This bathtub has a hole in it - Just throw it and the baby away, problem solved

superkuh 7y ago
It's not the first time this would be required and done. You probably remember Flash. Once Flash was kicked out Javascript took over it's duties. Only you can't just simply block all JS or expect sites to work without it. JS is worse than Flash now.
- anigbrowl 7y ago
  I do think some of the ways that js is being abused now are worse than how flash was being abused, but when you get down to it abusive behavior by website owners (and most often, by their marketing departments) is independent of programming languages. It's a business culture problem rather than some flaw in the language design. If everyone stopped using js tomorrow you'd still have people abusing CSS or HTML or the English language to try to undermine or trick people in various ways. It seems to me that we should be directing our efforts towards better browser/OS design and/or more ethical business practices than in largely futile campaigns to make people give up functionality. I'm reminded of some local activists who campaign tirelessly with posters and graffiti to have people stop driving so as to reduce fossil fuel consumption; even though I agree with them and don't drive myself, just telling people to stop is not very helpful without addressing the question of how to solve the problems that people use vehicles for in the first place.
- joquarky 7y ago
  And it's probably going to get worse with wasm + canvas.