4 ms·
Many people don't understand the distinction between client-side and server-side. Javascript typically runs on your computer. I know that it seems to be out the
by 16s 15y ago
Many people don't understand the distinction between client-side and server-side. Javascript typically runs on your computer. I know that it seems to be out there on the Web, but it's not. It's running locally on your computer. It's using your CPU and your memory. It's important that normal people understand this.
Edit: We disable Javascript because we don't want other people running code on our computers without our consent or knowledge while we browse the Web.
Edit2: Here is some Javascript to peg a client's CPU (this can be malicious or accidental, but either way it's why I run Javascript blockers):
<script type="text/javascript">
function burn_cpu(y)
{
var x = 0;
while ( x != y )
{
x = x+1;
}
}
burn_cpu(99999999);
</script>
- gregory80 15y agoI'm not sure I follow your argument. JS is bad b/c it's client side? Doesnt that paint all fat clients and every piece of software before the "web" in the same light?
- tobiasu 15y agoWith one difference: You install traditional software by choice. On the web, you don't have a choice, everyone can just install and execute whatever they please.
- 16s 15y agoNo it doesn't. JS runs automatically on my computer when I visit a website. By default our browsers execute it automatically. This is wrong. They do not ask for permission or check for signed code or offer any protection at all. JS infections are so rampant that a name has been given to it (drive by infections) as all you have to do is visit a website and its malicious JS runs on your computer and does the rest. Delivering malware via JS is now the cybercriminal’s favored means of attack.