Spectre mitigations murder userspace performance

Re:Spectre mitigations murder userspace performance by hutzlibu on Saturday June 19, 2021 @12:54PM (#27562120)

You probably misunderstood : allmost all websites require javascript, yes - but you can selectivly allow only the javascript of that site, their framework etc. and block all the tracker/ads javascript with NoScript/UBlock - and then it is working and probably quite safe. But to mitigate, more and more websites find ways to sneak in the tracker/ads/analytics into the main sites js. So it is not as easy, either.

Which is why I just use basic ublock origin and regulary wipe the browser cache.

[ Parent | on HN ]

Re:Spectre mitigations murder userspace performance by gruez on Saturday June 19, 2021 @05:04PM (#27564457)

>but you can selectivly allow only the javascript of that site, their framework etc. and block all the tracker/ads javascript with NoScript/UBlock

What's the difference between that and just using the standard easylist/easyprivacy filter? I suppose there's a small chance that a third party site went rogue and isn't on the default lists, but I'm skeptical how many attacks that would thrawt in reality. The attacks I heard of tend to be first party/supply chain (would be white listed by you), or delivered through an ad network (probably already be on a blacklist).

[ Parent | on HN ]

Re:Spectre mitigations murder userspace performance by SkyMarshal on Saturday June 19, 2021 @05:33PM (#27564649)

Easylist and Privacylist are great. I suppose the main reasons for doing it manually are seeing firsthand what all the sites you visit are doing behind the scenes, and getting a sense of what is legitimately needed functionality, what isn't, and what is just downright sketchy.

[ Parent | on HN ]

Re:Spectre mitigations murder userspace performance by hutzlibu on Saturday June 19, 2021 @05:59PM (#27564875)

Yup. But you can only do this when you have time for it. I kind of got very pragmatic with it.

[ Parent | on HN ]