Hacker News new | ask | show | jobs
by gruez 2347 days ago
Unfortunately there are too many sites that refuse to work without javascript, so any security benefits is negligible because it's very easy to be social engineered into enabling javascript.
4 comments

You can get most to work by whitelisting one domain while keeping the cesspool of trackers off your computer. If it still doesn't work there are better things in life to spend time on than somebody's poorly constructed website.
This is what I do and I 100% agree about lazy people that aren't willing to make a halfway decent website. I'm not that old, but sometimes I just want a website with text. I don't need autoplaying videos with a billion slideshow images and shown how fantasmagical your company is.
There are surprisingly few, and importantly you don't have to enable all the adtech networks that may or may not have a good security track record.
What I would like is the ability to replace scripts (including (but not limited to) inline scripts) with my own versions.
It’s defense in depth. And most sites work fine with 90% of their script-serving domains blocked.