IssueRaiser

(This is a reply to a nested comment, but I felt it was important enough to be top-level): > and pretending that a site is "broken" if i...

(This is a reply to a nested comment, but I felt it was important enough to be top-level): > and pretending that a site is "broken" if it doesn't work for a handful of geeks is being willfully obtuse. This is the common rallying cry of the 'use-JS-for-everything' camp. The most important reason a user should have an internet-wide blacklist on JS as the default is because the default should NOT be to allow any website ever to run arbitrary scripts on a user's machine. That's like always running as root while on a development server. No, wait - that's like having random people from the street have root on your server for arbitrary amounts of time, and all you can do is watch. Principle of least privilege certainly applies to the web as well. Let's not even mention how an open and private web is hindered by orders of magnitude from Google analytics and Facebook like buttons tracking you across entirely different spectra of websites simply because the sites you're visiting has them embedded. --- EDIT: Can the downvoters please reply with constructive criticism.

Posted by chrisdotcode on Feb 9, 2015, 7:57 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.8,000 issues0 comments

reliability (Network)

(This is a reply to a nested comment, but I felt it was important enough to be top-level): > and pretending that a site is "broken" if i...

chrisdotcodeFeb 9, 2015, 7:57 AM

(This is a reply to a nested comment, but I felt it was important enough to be top-level): > and pretending that a site is "broken" if it doesn't work for a handful of geeks is being willfully obtuse. This is the common rallying cry of the 'use-JS-for-everything' camp. The most important reason a user should have an internet-wide blacklist on JS as the default is because the default should NOT be to allow any website ever to run arbitrary scripts on a user's machine. That's like always running as root while on a development server. No, wait - that's like having random people from the street have root on your server for arbitrary amounts of time, and all you can do is watch. Principle of least privilege certainly applies to the web as well. Let's not even mention how an open and private web is hindered by orders of magnitude from Google analytics and Facebook like buttons tracking you across entirely different spectra of websites simply because the sites you're visiting has them embedded. --- EDIT: Can the downvoters please reply with constructive criticism.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue