> Any software installed in a computer can turn the machine into a zombie. That's not true about javascript. Also the DDoS attack risk is low, it would happen

> Any software installed in a computer can turn the machine into a zombie. That's not true about javascript. Also the DDoS attack risk is low, it would happens only as people would visit infected websites or with XSS attacks. You can't have a botnet with js if the browser isn't turned on on an infected webpage.