W3C abandons consensus, standardizes DRM, EFF resigns

Re:W3C abandons consensus, standardizes DRM, EFF resigns by tannhaeuser on Monday September 18, 2017 @06:43PM (#15280349)

Upvoted you, so count me in.

Hard to believe in 2017, but as recently as five years ago Google (of all people) published the Caja compiler [1] for sandboxed/statically verified JavaScript subsets, and there was AdSafe aiming for safe JavaScript as well.

[1]: https://developers.google.com/caja/

[2]: http://www.adsafe.org

[ Parent | on HN ]

Re:W3C abandons consensus, standardizes DRM, EFF resigns by abecedarius on Monday September 18, 2017 @07:30PM (#15280602)

I don't know its current status with the committee, but https://github.com/tc39/proposal-frozen-realms proposes something equivalent to Caja for modern JS. It can be a lot simpler now because ES6+ is much closer to what's needed than JS was when Caja was made.

[ Parent | on HN ]

Re:W3C abandons consensus, standardizes DRM, EFF resigns by qwepoiru on Monday September 18, 2017 @07:07PM (#15280481)

adsafe, and all static lint of ads, was dead from the beginning. If companies serve whatever comes from the ad networks, specially dynamic URLS, there is absolutely no way to enforce anything. You can check, but you can't enforce.

the only sane solution on ads is SafeFrames [1]. Which does not do much, but at least it prevents ads from scrapping the page and stealing your cookies from the main domain you are visiting. That is already a win, considering the mess it is now without it.

[1] https://www.iab.com/guidelines/safeframe/

[ Parent | on HN ]