News for hackers. Stuff that matters.
Re:Websites can now fingerprint a device when multiple brows... by pc86 on Tuesday February 14, 2017 @09:33AM (#13643708)
TIL utilizing the most widely available programming language in the world makes a website "poorly developed."
Re:Websites can now fingerprint a device when multiple brows... by logfromblammo on Tuesday February 14, 2017 @11:22AM (#13644612)
The worst offender I have seen in this respect is blog sites that won't even load static text without scripts enabled.

The complaint isn't with the scripting language, but with the blatantly unnecessary use of it.

One of the principles of human-friendly design is graceful degradation. For instance, you might design a museum for people that can walk. But some visitors might not be able to walk, so for them you install ramps and elevators when the stairs are not usable.

At the very minimum level, where someone is manually typing in HTTP requests, over a direct TCP connection to port 80 of your site, you should be returning something that can be read. Some people (or bots) may be fetching your site with curl or wget or links. Some people may be using screen readers. Some people may need machine assistance with pointer movement or scrolling. Some people may have extremely limited bandwidth, and won't automatically download images or frame contents.

If you can't degrade gracefully, your website is "poorly developed". So if you are utterly reliant on scripting to display anything at all, that certainly qualifies.

Re:Websites can now fingerprint a device when multiple brows... by coldpie on Tuesday February 14, 2017 @09:43AM (#13643780)
If your website requires active content in order to display plaintext, images and navigation, then yes, it is poorly developed. You failed to use the right tool for the job.
Re:Websites can now fingerprint a device when multiple brows... by pc86 on Tuesday February 14, 2017 @09:58AM (#13643868)
Navigation is typically comprised of text and/or images.

Some websites need more than text or images.

Re:Websites can now fingerprint a device when multiple brows... by zzzcpan on Tuesday February 14, 2017 @10:05AM (#13643917)
Very few websites, maybe 1 out of 100, most offenders are just rendering content in the browser for some reason. Although even bigger offenders are not individuals, but companies, outright blocking access to client's websites without javascript. So far it's mostly Cloudflare, I think most people using the web without javascript hate them the most, hopefully the trend won't continue.
Re:Websites can now fingerprint a device when multiple brows... by OJFord on Tuesday February 14, 2017 @10:39AM (#13644235)
Cloudflare blocks access to sites behind it to users with JS enabled? Even if there's no JS on the site?

1. Is there anything the site owner can do to turn that off?

2. Is it because they inject some kind of DDoS prevention/tracking thing? This suggests crawlers load JS, which I wouldn't have necessarily assumed.

Re:Websites can now fingerprint a device when multiple brows... by throwaway2048 on Tuesday February 14, 2017 @05:49PM (#13648046)
cloudflare can whitelist crawlers like google. The fact it blocks other automatic robots is more of a feature than a flaw.
Re:Websites can now fingerprint a device when multiple brows... by OJFord on Tuesday February 14, 2017 @07:27PM (#13648676)
Requiring visitors to have JS enabled isn't (a very good) feature.
Re:Websites can now fingerprint a device when multiple brows... by digler999 on Tuesday February 14, 2017 @10:26AM (#13644089)
abusing the most widely available language to destroy the UX makes a website poorly developed.
Re:Websites can now fingerprint a device when multiple brows... by coin on Wednesday February 15, 2017 @08:45PM (#13657253)
Why do I need to run executable code in order to read static content?