5 ms·

You leave Javascript enabled, open 15 tabs, and in all likelihood 2 or 3 of them are discreetly running cryptominers, another 2 or 3 are using the timed visited

You leave Javascript enabled, open 15 tabs, and in all likelihood 2 or 3 of them are discreetly running cryptominers, another 2 or 3 are using the timed visited links attack to sniff your browser history [1], another 4 or 5 are installing permacookies, and Google and Meta and Twitter are now aware of 12 out of the 15 tabs you opened because those pages have a Google analytics or AdSense JS snippet or a like/retweet button somewhere on the page. Javascript is a security and privacy nightmare. It's frankly absurd to me that we default to Javascript switched on everywhere for everything. It feels like chmodding your entire home directory to 777 on a shared system. JS is also an accessibility nightmare, but unfortunately turning it off doesn't fix that. [1] https://bugs.chromium.org/p/chromium/issues/detail?id=252165 https://bugs.chromium.org/p/chromium/issues/detail?id=252165

artimaeis 3y ago
I think we’re visiting different websites. When I leave 20+ tabs open over the weekend my CPU remains generally idle. I do pretty aggressively utilize ad blocking, so maybe that’s helping out. Where are you seeing crypto-mining js malware regularly being loaded?
- Calavar 3y ago
  I've seen crypto mining scripts on sports streaming websites. Issues like permacookies and having half a dozen tracking scripts on a single page are pervasive, even on "legitimate" websites. As for sniffing browser history, I know that it happens in the wild, but I don't know to what extent.
symlinkk 3y ago
> feels like chmodding your entire home directory to 777 on a shared system And yet every normal person uses it daily without issue.
- yjftsjthsd-h 3y ago
  Every normal person uses it daily, yes, but "without issue" is less obvious; that they don't notice being stalked or having their battery drain faster doesn't make it not a problem.
- Dalewyn 3y ago
  We are not normal people.
- benterix 3y ago
  There's a ton of issues here, it's just most people either don't know them and don't realize the full implications. And some people just don't care because they feel powerless - "Yes I allow these companies to track me because what else can I do if I want to use mu devices like all other people do?"

artimaeis 3y ago

I think we’re visiting different websites. When I leave 20+ tabs open over the weekend my CPU remains generally idle. I do pretty aggressively utilize ad blocking, so maybe that’s helping out. Where are you seeing crypto-mining js malware regularly being loaded?

Calavar 3y ago
I've seen crypto mining scripts on sports streaming websites. Issues like permacookies and having half a dozen tracking scripts on a single page are pervasive, even on "legitimate" websites. As for sniffing browser history, I know that it happens in the wild, but I don't know to what extent.

symlinkk 3y ago

> feels like chmodding your entire home directory to 777 on a shared system And yet every normal person uses it daily without issue.

yjftsjthsd-h 3y ago
Every normal person uses it daily, yes, but "without issue" is less obvious; that they don't notice being stalked or having their battery drain faster doesn't make it not a problem.
Dalewyn 3y ago
We are not normal people.
benterix 3y ago
There's a ton of issues here, it's just most people either don't know them and don't realize the full implications. And some people just don't care because they feel powerless - "Yes I allow these companies to track me because what else can I do if I want to use mu devices like all other people do?"