4 ms·

The website does not work without Javascript. Javascript is unsafe. I would not trust them with my sensitive revelations.

by aw3c2 15y ago

driverdan 15y ago
Saying JavaScript is unsafe is like saying driving a car is unsafe. If you intentionally run into a wall sure, it's unsafe. If you don't trust a site enough to let them use JS do you really trust them enough to send them your leaked data?
- streptomycin 15y ago
  JavaScript just adds another thing that could go wrong, in exchange for a potential increase in usability. On a site like this, it's almost certainly not worth it.
  - neilk 15y ago
    Usability is the entire focus of what they are doing. They aim to make it possible for non-programmers/non-sysadmins/non-security geeks to set up their own whistleblowing framework. Think journalists, volunteer orgs, activists, dissenters...
    - Hrundi 15y ago
      I think the word here is accessibility, not usability. Every step of the process can be made usable without the need for JavaScript. From a security stand-point, I don't trust whatever JavaScript engine is running, even more when considering non tech-savvy people. An activist could find himself in a delicate position and discover that many CPU cycles ate away whatever battery was left in their mobile devices, just to display three Canvas elements in a row, with the text "Tulip", "not", "found" in a cool font. Now the browser can crash due to a flaky HTML5 Canvas implementation in addition to the JS engine.
olalonde 15y ago
Your concern is pretty silly. If your life is at stake for whistle blowing, I bet Javascript being unsafe will be the last of your worries! You will probably use Tor in an Internet Cafe with incognito browsing mode.
- idonthack 15y ago
  AU CONTRAIRE, javascript being unsafe would be the first of my worries. what's the point of all that anonymizing software when a tiny bit of js hackery undoes it all?

The website does not work without Javascript. Javascript is unsafe. I would not trust them with my sensitive revelations.

by aw3c2 15y ago

The website does not work without Javascript. Javascript is unsafe. I would not trust them with my sensitive revelations.

driverdan 15y ago

Saying JavaScript is unsafe is like saying driving a car is unsafe. If you intentionally run into a wall sure, it's unsafe. If you don't trust a site enough to let them use JS do you really trust them enough to send them your leaked data?

streptomycin 15y ago
JavaScript just adds another thing that could go wrong, in exchange for a potential increase in usability. On a site like this, it's almost certainly not worth it.
- neilk 15y ago
  Usability is the entire focus of what they are doing. They aim to make it possible for non-programmers/non-sysadmins/non-security geeks to set up their own whistleblowing framework. Think journalists, volunteer orgs, activists, dissenters...
  - Hrundi 15y ago
    I think the word here is accessibility, not usability. Every step of the process can be made usable without the need for JavaScript. From a security stand-point, I don't trust whatever JavaScript engine is running, even more when considering non tech-savvy people. An activist could find himself in a delicate position and discover that many CPU cycles ate away whatever battery was left in their mobile devices, just to display three Canvas elements in a row, with the text "Tulip", "not", "found" in a cool font. Now the browser can crash due to a flaky HTML5 Canvas implementation in addition to the JS engine.

olalonde 15y ago

Your concern is pretty silly. If your life is at stake for whistle blowing, I bet Javascript being unsafe will be the last of your worries! You will probably use Tor in an Internet Cafe with incognito browsing mode.

idonthack 15y ago
AU CONTRAIRE, javascript being unsafe would be the first of my worries. what's the point of all that anonymizing software when a tiny bit of js hackery undoes it all?