News for hackers. Stuff that matters.
Re:Linux page table isolation is not needed on AMD processors by baq on Tuesday January 02, 2018 @02:09PM (#16054452)
there's a subset of the web that still remains a hypertext document database (the 'web 1.0' if you will) instead of becoming an application delivery platform (web 2.0, i hear it's almost out of beta). going JS-less on wikipedia is possible and not at all a bad experience.
Re:Linux page table isolation is not needed on AMD processors by IgorPartola on Tuesday January 02, 2018 @02:43PM (#16054851)
Sure if you limit your life to Wikipedia that's fine. Hell, you don't even need an internet connection for it. Just download it all once in a while. But the rest of us like using places like Amazon, Slack, Google Maps, etc.

I fully support not making content delivery rely on JS. But I disabling JS because it can be used for intrusive ads is a lot like taking the wheels off your car because it can take you to the mall where you might see big for sale signs and annoying sales people. Effective, but stupid.

Re:Linux page table isolation is not needed on AMD processors by username223 on Tuesday January 02, 2018 @05:17PM (#16056324)
> But disabling JS because it can be used for intrusive ads is a lot like taking the wheels off your car...

You should try it sometime. Selectively enabling JS will be annoying at first, but as long as you save your preferences, the web will soon become a much less terrible place, and you'll rarely have to tweak your config. This approach won't work for non-techies, of course, but it's not much of a hardship for someone vaguely familiar with how the web works. Amazon, for example, works fine with a bit of JS not including amazon-adsystem.com.

Re:Linux page table isolation is not needed on AMD processors by Yetanfou on Wednesday January 03, 2018 @05:45AM (#16059967)
Bad comparison, unless you were to change it to 'reprogramming your car so it does not take you to - or warns you for - annoying sales people'. Javascript can be disabled for specific sites or purposes or only enabled for specific sites and purposes.
Re:Linux page table isolation is not needed on AMD processors by kuschku on Tuesday January 02, 2018 @05:39PM (#16056531)
> Slack

Slacks has an IRC gateway, though.

Re:Linux page table isolation is not needed on AMD processors by nemothekid on Tuesday January 02, 2018 @09:47PM (#16057871)
JS is part of the web - going JS-less under the guise of security seems fruitless to me. Even if I went JS-less, it would be very difficult for me to convince anyone with access to privileges on my life to go JS-less as well. A JS exploit could affect my parents which would in turn affect me. A JS exploit could affect my doctor/lawyer/bank teller which could affect me.

I'm not sure what the advantages of this argument are anymore. JS is now so ubiquitous I can only imagine how a drive-by JS exploit can truly mess you up in obscure ways despite the fact you browse the web with IE4.

Re:Linux page table isolation is not needed on AMD processors by pdimitar on Wednesday January 03, 2018 @06:25AM (#16060114)
That is the true counter-point here. Even if one person protects themselves better they are so connected to several (or many) others that the overall protection gains are miniscule.

And this is not gonna change before a huge paradigm shift in network protocols and network apps.