Hacker News new | ask | show | jobs
by notzorbo3 3124 days ago
Whenever someone complains about a website not working without javascript enabled, someone inevitably responds "it's 2017, you can expect javascript to be enabled". I think that piece of knowledge is outdated:

- Late 1990's: static html documents + forms - early 2000's: shitty DHTML scripts that added nothing - early 2010's: javascript + gracefully downgrading sites - 2015/16: required useful javascript everywhere - early 2017: trackers everywhere, html5 popups, trackers, spywhere, trackers, bitcoin miners, trackers, etc, etc.

2017 is the year where you NEED a javascript blocker. What's the use of having any security at all if you're going to leave the biggest attack vector in modern times completely unprotected?

Plus, the web has become completely unusable without a script blocker.

2 comments

I used to be big into webdev back in the .com wave.

Nowadays I always push for HTML5/CSS3 with minimal JavaScript, preferably with server side rendering.

For anything really complex I usually try to see if it can be done as native app instead.

> the web has become completely unusable without a script blocker.

When you exaggerate like that, it diminishes your point. I use the web all day, every day and I have never installed a script blocker.

Maybe not outright unusable, but certainly really fucking annoying.

Not to mention hazardous.