←back to thread

451 points todsacerdoti | 1 comments | | HN request time: 0s | source
Show context
keeganpoppen ◴[] No.45058084[source]
i will say that though i am predisposed to appreciate and agree with an article like this, any sort of value proposition around "some users don't want javascript" just doesn't... hit for me. and, mind you: i am a card-carrying arch user and have spent more time messing with browser scripting and web crawling, and am more of a True Believer than most. it's just such a niche user preference that i think it should largely be simply ignored. yes, i would love the world to be better for the "noscript" universe, no, i don't think that any individual "grassroots" effort should stake itself on "no javascript" being any part of its utility. i think there are a million other reasons why CSS should win out that are more compelling than an appeal to what feels, extremely ironically, like a callback to the "but 10% of your users use IE6" days... all in all, yes: this is somewhat of a minor point wrt. to the article (which btw i think is great), but i am just calling the "trend", such as it is / has been, for what (i think) it is.
replies(5): >>45058205 #>>45058259 #>>45058381 #>>45058464 #>>45059079 #
rebane2001 ◴[] No.45058259[source]
fwiw, i've been using the internet with noscript and i find it perfectly usable

for any sites that do need js, i simply enable it for them from the extension, so it never gets in the way with sites i use regularly

it's pretty nice for performance/battery and security

have you ever tried living with noscript for over a week? i feel like your perspective could be a bit mislead, because i felt the exact same way as you before i started using noscript

disclaimer: i'm the author of the blogpost

replies(5): >>45058494 #>>45059123 #>>45059657 #>>45059996 #>>45060150 #
ajross ◴[] No.45059123[source]
> fwiw, i've been using the internet with noscript and i find it perfectly usable

Genuine question though: you just run a ton of apps instead, right? Windows apps, iOS apps, whatever. Right? Because you still want to use (and not just "look at") Facebook or WhatsApp or BSky or Drive or CoD:BO6 or... everything. And all that stuff runs in an environment with the same privacy-compromising power (generally much more dangerous, frankly).

I just don't see a situation where "use noscript" doesn't really just mean "use your phone so you don't have to use your browser". I mean, why bother? You're not winning anything.

(Quite frankly most of the people I see in this argument eventually admit this straight up: "no javascript" really means "no Google" to them, and their goal isn't privacy at all except as a proxy thing; it's the destruction of the World Wide Web as a platform in favor of Apple's offerings.)

replies(3): >>45059179 #>>45059461 #>>45060596 #
rebane2001 ◴[] No.45059179[source]
i have js enabled for webapps such as discord and bluesky - having js disabled by default for sites i haven't visited is very good for limiting attack surface

for sites such as facebook, i don't really use them that often, so i only run js on them when i feel like consenting to it

yes, i use programs/apps, but attack surface and threat models aren't binary, so it's still better to make things more secure

replies(1): >>45059354 #
ajross ◴[] No.45059354[source]
> yes, i use programs/apps, but attack surface and threat models aren't binary, so it's still better to make things more secure

But again, the point is that market decisions aren't microeconomic. The world where everyone uses noscript by default is a world where no one builds web apps anymore (because the platform sucks by default) and everyone uses native apps from whoever the dominant vendor happens to be. And that's worse (much worse, by basically every metric, including privacy and security) and not better.

Your logic only works if you're a parasite: you can use noscript to "protect" yourself only if most people don't.

replies(2): >>45059616 #>>45059629 #
1. Jach ◴[] No.45059616[source]
Worse for whom? Not the end user, where again they just permanently enable the app once if they are going to use it often. This makes it little different to the consent for browser permissions, like notifications or access to a microphone or camera, which everyone does use. If everyone used noscript you might even see a change to the default interface to make it more like the permissions flow.

Separately, we already live in a world where people tend to pick "native" apps (e.g. Discord, Slack) that are just wrappers around the webapp, and on the phone you have similar behavior where people often prefer the "native" app (e.g. twitter/X) over the mobile web version. Despite this asymmetry, web apps continue to be built, and they would continue even if everyone used noscript.