Re:A day without JavaScript
by madsbuch on Wednesday June 07, 2017 @08:29AM
(#14505734)
This is a question about JS vs no JS, not about optimizations of JS.
[ Parent
| on HN ]
The fastest code is the code which never gets written.
That is fair, but when was the last time when a js only site was running on optimized JS?
All google products. But it is ridiculous to disregard JavaScript because some people can't write it properly. It is the same as saying that I wouldn't use a browser because I once went to a website that displayed a popup.
It is not ridiculous, machine crippling JS malware is a click a way and you will never know until you click. The safe strategy is JS off by default plus whitelisting.
> wouldn't use a browser because I once went to a website that displayed a popup
you would use a popup blocker though.
Re:A day without JavaScript
by neurotrace on Wednesday June 07, 2017 @12:02PM
(#14507465)
> machine crippling JS malware is a click a way
I have been using the internet nearly daily for about 20 years now. I can't recall a single time I clicked on something that gave me "machine crippling JS malware".
Barring some serious security gaps, JS isn't even capable of doing anything more than lock up the browser and maybe send some extremely minimal information about you back to someone elses server.
> Barring some serious security gaps, JS isn't even capable of doing anything more than lock up the browser and maybe send some extremely minimal information about you back to someone elses server.
Not true. First JavaScript Rowhammer exploit was publicized in 2015: https://www.youtube.com/watch?v=9L5MJ43nbkI
Re:A day without JavaScript
by neurotrace on Wednesday June 07, 2017 @01:38PM
(#14508297)
Interesting. I stand corrected.
Crippling in the sense that I have to forcibly kill whatever browser I'm using because it is using 100% cpu and the machine becomes very unresponsive.