9 ms·

With the usual qualification that you have to have your browser set to automatically execute javascript code from random untrusted websites.

askonomm 3y ago
So ... the default settings of most browsers? The way you phrased your sentence makes it seem as if users themselves set their browser up like that, when that is not the case.
- superkuh 3y ago
  Yup. The defaults and expectations for the commercial web are terrible. Since this is a technical forum I assume most of as aren't running our browsers that way.
  - askonomm 3y ago
    I doubt most of us turn off javascript, and enable it on a case by case basis, regardless if it's a technical forum or not. I certainly don't. That would be a major inconvenience to do for very little benefit, imo.
    - OfSanguineFire 3y ago
      "Most of us" probably not, but a lot of us. NoScript is one of the most popular Firefox extensions in nerd circles. Also makes a huge difference when browsing on old hardware or from a connection where data is pricey.
    - LegibleCrimson 3y ago
      I used to (NoScript, then uMatrix for years), but it is a ton of work. Just blocking problem scripts with uBlock Origin gets you 95% of and way there. The last 5% is a lot of extra effort for seriously diminishing returns.
      - superkuh 3y ago
        After nearly a decade of using NoScript I have developed an intuitive sense of what domains to temp whitelist, and in what orders, to get things working without letting third party scripts get involved. It you stick with it it gets much easier. I do use uBlock Origin too with NoScript, but that's only for handling the JS of domains NoScript temp whitelists.
  - eyelidlessness 3y ago
    That’s a really surprising assumption.
    - superkuh 3y ago
      Did you know that HN works fine without Javascript? There's a reason for that.
  - whatevaa 3y ago
    Assumptions are usually wrong unless verified.
_ache_ 3y ago
Which is the default for the vast majority of users.
HtmlProgrammer 3y ago
While I admire your dedication to privacy by disabling JavaScript, personally I’ve gone crazy and given up due to all the people around me in my life forcing me to live in a privacy nightmare
Espressosaurus 3y ago
The era of being able to reasonably disable javascript by default ended about 10 years ago, maybe 15 at this point. If you're still disabling by default in 2023, you are a fraction of a percent of a fraction of a percent of people dedicated enough to go through that pain. I wish I had your dedication.

askonomm 3y ago

So ... the default settings of most browsers? The way you phrased your sentence makes it seem as if users themselves set their browser up like that, when that is not the case.

superkuh 3y ago
Yup. The defaults and expectations for the commercial web are terrible. Since this is a technical forum I assume most of as aren't running our browsers that way.
- askonomm 3y ago
  I doubt most of us turn off javascript, and enable it on a case by case basis, regardless if it's a technical forum or not. I certainly don't. That would be a major inconvenience to do for very little benefit, imo.
  - OfSanguineFire 3y ago
    "Most of us" probably not, but a lot of us. NoScript is one of the most popular Firefox extensions in nerd circles. Also makes a huge difference when browsing on old hardware or from a connection where data is pricey.
  - LegibleCrimson 3y ago
    I used to (NoScript, then uMatrix for years), but it is a ton of work. Just blocking problem scripts with uBlock Origin gets you 95% of and way there. The last 5% is a lot of extra effort for seriously diminishing returns.
    - superkuh 3y ago
      After nearly a decade of using NoScript I have developed an intuitive sense of what domains to temp whitelist, and in what orders, to get things working without letting third party scripts get involved. It you stick with it it gets much easier. I do use uBlock Origin too with NoScript, but that's only for handling the JS of domains NoScript temp whitelists.
- eyelidlessness 3y ago
  That’s a really surprising assumption.
  - superkuh 3y ago
    Did you know that HN works fine without Javascript? There's a reason for that.
- whatevaa 3y ago
  Assumptions are usually wrong unless verified.

_ache_ 3y ago

Which is the default for the vast majority of users.

HtmlProgrammer 3y ago

While I admire your dedication to privacy by disabling JavaScript, personally I’ve gone crazy and given up due to all the people around me in my life forcing me to live in a privacy nightmare

Espressosaurus 3y ago

The era of being able to reasonably disable javascript by default ended about 10 years ago, maybe 15 at this point. If you're still disabling by default in 2023, you are a fraction of a percent of a fraction of a percent of people dedicated enough to go through that pain. I wish I had your dedication.