News for hackers. Stuff that matters.
Re:In protest of the web{*} bulldozer, a response to websock... by josteink on Wednesday May 20, 2020 @05:33PM (#23252054)
> The web already has a user-facing permissions system; it wouldn't be hard to add many of these under that umbrella (USB, Bluetooth, and Sensors stand out as obvious candidates that should've been behind that barrier from the beginning)

Let’s add Javascript to that list too.

Not all sites need it, and given the abuse it’s responsible for, it shouldn’t be permitted unless a user opts in.

Re:In protest of the web{*} bulldozer, a response to websock... by neotek on Wednesday May 20, 2020 @08:47PM (#23253730)
>Not all sites need it, and given the abuse it’s responsible for, it shouldn’t be permitted unless a user opts in.

And 99.999% of internet users will therefore be trained to blindly click "accept" on any permission popups a website shows them, since outside of HN pretty much everybody loves and appreciates the rich functionality javascript provides.

Re:In protest of the web{*} bulldozer, a response to websock... by catalogia on Wednesday May 20, 2020 @10:24PM (#23254254)
> And 99.999% of internet users will therefore be trained to blindly click "accept" on any permission popups a website shows them

Or not, when they inevitably discover that leaving it turned off bypasses 90% of newspaper website paywalls whereas turning it on slows their browser down to a crawl and floods their screen with ads.

Re:In protest of the web{*} bulldozer, a response to websock... by hombre_fatal on Wednesday May 20, 2020 @05:58PM (#23252417)
That was also the logic behind Windows Vista's UAC popup.
Re:In protest of the web{*} bulldozer, a response to websock... by josteink on Thursday May 21, 2020 @03:20PM (#23263623)
A great example!

That single move from Microsoft more or less eliminated the need for any normal application run by any normal user to require admin-rights to function, something which up to that point more or less had been the norm.

Developers fixed their applications to work with a sane privilege level and pretty much everyone was better off.

Let’s do the same with the rampant JS-abuse on the web.

Re:In protest of the web{*} bulldozer, a response to websock... by vbezhenar on Wednesday May 20, 2020 @06:06PM (#23252518)
Chrome allows to disable JavaScript by default and only allowing it on some websites. Probably privacy and security-conscious users use that feature.
Re:In protest of the web{*} bulldozer, a response to websock... by Shared404 on Wednesday May 20, 2020 @09:41PM (#23254038)
Pretty sure most privacy conscious users don't use Chrome.