[marklgr]

Why should we trust any website and execute their JS code on our machine? What about privacy, if they decide they can track us and sell the information to whoever they want? And even if they're "legit", what about the 3rd parties they might trust wrongly?

[Biganon]

Honest question : what harm could possibly be done by Javascript?

[zeveb]

Remote code execution for one: https://oreoshake.github.io/xss/rce/bugbounty/2015/09/08/xss...

[Crespyl]

What's more, rowhammer can be done from js: https://github.com/IAIK/rowhammerjs