Hacker News new | ask | show | jobs
by JohnFen 2728 days ago
I am very, very sparing about installing apps. However, I'm even MORE cautious about browsing to websites, unless I can disable all client-side scripting.

At least I can firewall apps to mitigate any abuse they may engage in. That's much harder to do with websites.

2 comments

Sounds like a miserable way to browse the web. Why not just isolate your browsing in a VM and trash it when you’re done?

I’m not security expert but seems to me if you clicked on something malicious, it costs you nothing as you’re not really exposing anything. Obviously don’t do your banking, etc on the same VM then go clicking around warez sites

It's not miserable at all -- in fact, I personally think that it makes most websites better. If a website can't operate without JS, then I just don't use that site. No loss to me.

VMs are another reasonable approach. I don't do that, though, because it's more hassle than it's worth to me.

> if you clicked on something malicious

That's not my primary concern. My primary concern is really to stop bad behavior that is very common across all websites (tracking, etc.)

just use Umatrix - https://github.com/gorhill/uMatrix

you can get the add-on for Firefox mobile also. It can be a hassle for the lazy user, but the addon will provide visibility into scripts, cookies and services used by websites.

Most scripts are blocked by default which dramatically improves page load times and privacy.