sent from a disposable whonix qube

  • rumschlumpel@feddit.org
    link
    fedilink
    arrow-up
    4
    ·
    16 days ago

    I’m reading a lot of personal blogs that don’t use JS at all, or at least are still functional with JS blocked. A somewhat surprising amount of websites work without it.

    The issue with JS is that while I assume that your use of JS is relatively minimal and you’re not malicious, I don’t know that, and even if you’re not actively malicious, your site might still be compromized by exploited JS vulnerabilities, site hacks or uninformed/negligent choices of third party libraries/plugins/CDNs (NPM is notorious for supply chain attacks and lots of otherwise alright sites include font CDNs or even analytics). I’m not super anal about not using any site that doesn’t work without JS, but having it off by default is definitely good practice and sometimes I do decide that I don’t want to see a site that badly.

    • keiko@fedia.ioOP
      link
      fedilink
      arrow-up
      3
      ·
      16 days ago

      The security issues are the reason that, if I do decide to enable javascript, it’s in a disposable whonix qube. Which is basically what the bottom left panel of the meme is describing. Whereas the bottom right describes my general lack of desire to enable it at all.