4 ms·

Turn off the web browser feature that allows JS in an advertisement in a background tab to globally grab your input.

• orbital-decay 5mo ago
  Sure, browsers had three decades of adversarial testing to evolve into sandboxes, but what are you going to do in case of something like the xz backdoor in a desktop application? It's no longer a hypothetical in 2020s.
  • chadgpt3 5mo ago
    You're going to be hacked. There's no useful middle ground between letting programs modify how your computer works and not letting programs modify how your computer works.
    • orbital-decay 5mo ago
      Of course there is: fine-grained access control and attack surface reduction. It's not all or nothing.
      • chadgpt3 5mo ago
        Do you want to see the dancing bunnies? [Yes] [No] Apple apologists keep making the excuse that Apple has to provide no side loading because if there was any single way to do it, all scammers would be making all grandmas do that. They're correct.
        • orbital-decay 5mo ago
          That's a complete strawman though, I'm not talking about any of that.