3 ms·
Linking to a .js file and asking/expecting us to install without reviewing the source is optimistic at best. Why not drop this at http://userscripts.org http://
by ScottWhigham 17y ago
Linking to a .js file and asking/expecting us to install without reviewing the source is optimistic at best. Why not drop this at http://userscripts.org http://userscripts.org and link to that page?
And WTF hasn't anyone said this in the past 3 hrs already?
- dionidium 17y agoI don't expect you to do anything. It's free if you want it and just as easy to ignore. Enjoy! (Or not.)
- sielskr 17y agoLinking to a .js file and asking/expecting us to install without reviewing the source is optimistic at best. . . . And WTF hasn't anyone said this in the past 3 hrs already? You were too hasty with the WTF. Unless he or she is extremely sleep-deprived or something, any programmer can figure out how to review the source code in the .js file before installing.
- mojaam 17y agoWouldn't expect it to show up on the front page if it was harmful.
- ScottWhigham 17y agoI really am amazed at the fact that no one has a problem with a link to a .js file. I'm not a security nut and this bothers me. The fact that it doesn't bother anyone else just shows that incredibly smart people like the folks at HN are not immune to apathy or hubris (I'm not sure which) when it comes to computer security. And the excuse that, "We all already know how to view the source" is so lazy that I don't know what to say lol. I can't think of another site in which someone posting a javascript link would (a) be allowed, and (b) not be instantly jumped all over. There's a reason for that...