How to make a mint: The cryptography of anonymous electronic cash

Re:How to make a mint: The cryptography of anonymous electro... by apotheon on Friday August 21, 2009 @03:54PM (#778301)

> A much better point against JS would have been about XSS or similar.

I don't think anyone was making a point against JavaScript in terms of vulnerabilities in the JavaScript interpreter itself. If you read the statement to which you reply, you might notice that the parent comment referred to people wanting to avoid execution of code from the Internet on the machine -- not about whether JavaScript is itself directly vulnerable.

> the local-machine arbitrary-code-execution exploit you seemed to allude to.

I didn't get that impression at all.

[ Parent | on HN ]

Re:How to make a mint: The cryptography of anonymous electro... by sho on Friday August 21, 2009 @04:17PM (#778367)

"I didn't get that impression at all."

Sorry - as mentioned in my other reply at this level, I really was imagining a certain type of person (in fact, a certain person) as I typed that, and kind of went off on my own.

Still:

"you might notice that the parent comment referred to people wanting to avoid execution of code from the Internet on the machine"

I maintain this is a largely irrational fear. The very phrase "execution of code" is very blurry when it comes to the web browser. And one hitherto unknown bug in an image or (closed source) PDF library and you're "executing code from the internet" too, and at a far more dangerous level of access than anything inside the JS sandbox.

[ Parent | on HN ]

Re:How to make a mint: The cryptography of anonymous electro... by apotheon on Saturday August 22, 2009 @12:00AM (#778977)

I don't really see how the equivalent of "I'm already at risk, so I may as well be at further risk" is an effective counterargument.

[ Parent | on HN ]