Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That really flipped your wig didn't it?

I'm intellectually curious, what you're so deeply invested in that was just threatened?



He’s right, people who always talk about they don’t use sites that require Javacript adds about as much to the conversation as people who show up in television conversations and say “I haven’t owned a television in 20 years, do people still watch TV?”


If we stick with that analogy, then since HN requires no Javascript, it's more like we're having a discussion on a radio show, and I am saying "I don't really watch much TV", no?

What I hear is that Javascript is a means of speed and power to you. And for you, forgoing that power would serve no useful purpose. Do I understand that correctly?

What I am wondering is, do you think that for other people, they should, maybe even must, feel the same way? Even if they are very pleased just listening to the radio?


Well, how many people do you really think disable JavaScript and want to browse the web over Tor?


Forget about me for a moment.

Does Javascript really mean something important to you?


Not running JavaScript in 2024 is like putting a speed governor on your own car that limits you to going 35 miles an hour.

It serves no useful purpose


> It serves no useful purpose

No useful purpose to who?


What purpose do you have for removing functionality that has been part of the web since the 90s?


Of course. What I do not want or need is code that's been part of the web since about 2016-2020, which is arbitrary code execution by complete strangers. Not even in a sandboxed disposable web browser.

Now I suspect you'll want to tell me how actually Javascript is perfectly safe... and that's a conversation we can save for another day for the sake of both our dignity and friendship. I'm afraid it's my job to know otherwise.


Well despite your appeal to authority…

If you knew about that many exploits in the wild, surely you could (white hat) tell the company who created the browser or (black hat) make a lot of money by selling it to three letter agencies or private companies that sell it to three letter agencies.

However, in the real world, a fully patched Android or iOS operating system - especially one that is in “lock down mode” is not any more susceptible to Zero day exploits than the number of other exploitable parts of the OS that you also don’t have any control over.

And even if you only run open source software, how long was the OpenSSL bug in operating systems before it was discovered?

Do you use your mobile’s messaging system? That’s been one of the primary targets of exploits that will target you directly.


I appreciate your sincere and sweet overtures scarface, but I'm just not that kinda javascript girl. You're right though, everything out there is riddled with holes. Let's not give up though.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: