Hacker News new | ask | show | jobs
by Calavar 1060 days ago
You leave Javascript enabled, open 15 tabs, and in all likelihood 2 or 3 of them are discreetly running cryptominers, another 2 or 3 are using the timed visited links attack to sniff your browser history [1], another 4 or 5 are installing permacookies, and Google and Meta and Twitter are now aware of 12 out of the 15 tabs you opened because those pages have a Google analytics or AdSense JS snippet or a like/retweet button somewhere on the page.

Javascript is a security and privacy nightmare. It's frankly absurd to me that we default to Javascript switched on everywhere for everything. It feels like chmodding your entire home directory to 777 on a shared system.

JS is also an accessibility nightmare, but unfortunately turning it off doesn't fix that.

[1] https://bugs.chromium.org/p/chromium/issues/detail?id=252165

2 comments

I think we’re visiting different websites. When I leave 20+ tabs open over the weekend my CPU remains generally idle.

I do pretty aggressively utilize ad blocking, so maybe that’s helping out.

Where are you seeing crypto-mining js malware regularly being loaded?

I've seen crypto mining scripts on sports streaming websites.

Issues like permacookies and having half a dozen tracking scripts on a single page are pervasive, even on "legitimate" websites.

As for sniffing browser history, I know that it happens in the wild, but I don't know to what extent.

> feels like chmodding your entire home directory to 777 on a shared system

And yet every normal person uses it daily without issue.

Every normal person uses it daily, yes, but "without issue" is less obvious; that they don't notice being stalked or having their battery drain faster doesn't make it not a problem.
There's a ton of issues here, it's just most people either don't know them and don't realize the full implications. And some people just don't care because they feel powerless - "Yes I allow these companies to track me because what else can I do if I want to use mu devices like all other people do?"
We are not normal people.