Hacker News new | ask | show | jobs
by negativity 4694 days ago
...and remember, kids. JavaScript is now compulsory.
2 comments
sp332 4694 days ago
You can, as always, install NoScript or other js-control extensions. Or if you want to break all js everywhere, head to about:config.
link
scott_karana 4694 days ago
By what definition of compulsory?
link
negativity 4693 days ago
In that inexperienced users are not well-informed of the option to disallow it, and might not understand that indiscriminate, promiscuous execution of JavaScript as a default behavior can be hazardous. ...at least as hazardous as connecting to unencrypted Wi-Fi.

To whit: http://beefproject.com/

New users aren't even readily informed that JavaScript is a thing.

link
ghostdiver 4693 days ago
Didn't ever hear of pure JS browser exploit, only a mix of Flash or Java.
link
aclevernickname 4692 days ago
I have an omegle exploit that exists entirely in javascript. it was written for Chrome (Windows/Mac specifically), but still 100% javascript. I'd be happy to email a copy of it (in .zip form) to anyone interested.

Also, the recent Tor Browser Bundle exploit (RIP Tormail) was javascript-based.

link