Hacker News new | past | comments | ask | show | jobs | submit login

> Is the disclaimer really necessary

Yes.[0]

[0] https://news.ycombinator.com/item?id=16191843




Why? This seems like an irrational fear, it’s not specific to JavaScript in any way. All code is subject to those exploits. Anything you run in any language.


Oh please. Is this suppose to be some sort of gotcha about the dangers of using JavaScript? I don't see how the existence of hardware level (CPU) vulnerability that could impact any software, including the browser itself, applies here.

If you refuse to use a modern web browser, that's a totally valid choice, but doing it based on some misguided notion of security is nonsensical.


> but doing it based on some misguided notion of security

What browser you use? I suppose it is Chrome/Chromuim-based browser of Firefox.

Did you read its changelogs? There are a lot of JavaScript-related vulnerability issues fixed this year (as in previous 10 years), right?


For most people the value provided by using the modern web, which for all intents and purposes requires JS, far outweighs the risks.

There are of course exceptions, those in particularly sensitive situations, but in those cases other precautions should be taken as well.

And yes, the text based browser you use may see fewer security patches in the change log, but it is also far less tested. The user base is just not there. If no JavaScript is that important to you it can easily be disabled in Firefox and I'd wager you'd come out ahead in terms of security.


> If no JavaScript is that important to you it can easily be disabled in Firefox

JFTR, Is not Firefox GUI itself uses/based on JS?[0]

[0] https://techjourney.net/disable-javascript-in-firefox/





Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: