News for hackers. Stuff that matters.

A comment on WebRTC Copy – OTR and fast file transfers over WebRTC. Parent comment

Re:WebRTC Copy – OTR and fast file transfers over WebRTC by sillysaurus2 on Sunday October 20, 2013 @05:17PM (#6581531)
If your concern is the host operator, well obv can't circumvent that.

Of course we can circumvent that. Make a plugin to alert the user whenever the JS changes.

[ Parent | on HN ]
Re:WebRTC Copy – OTR and fast file transfers over WebRTC by voltagex_ on Sunday October 20, 2013 @06:33PM (#6581842)
What do you base your initial known good JS on though? What is the user supposed to do with the information that the JS has changed? A diff of minified JS isn't that helpful.
[ Parent | on HN ]
Re:WebRTC Copy – OTR and fast file transfers over WebRTC by sillysaurus2 on Sunday October 20, 2013 @07:26PM (#6582055)
The author would say "the current version is 0.6.4 and its JS hashes to this SHA256 hash: xxx"

Open source already does this for binaries. Why not JS?

This assumes it's even possible to get a consistent hash of all javascript executing on a page, though.

[ Parent | on HN ]
Re:WebRTC Copy – OTR and fast file transfers over WebRTC by mike-cardwell on Monday October 21, 2013 @07:20AM (#6584701)
Script on a site like this should not be minified. It should be easily readable and well commented, so that people can audit it properly.
[ Parent | on HN ]