scripts? (europe.pub)
submitted 1 month ago by to c/linuxmemes@lemmy.world
 

sent from a disposable whonix qube

4-panel meme using the "You guys are getting paid?" template from "We're the Millers" * Person 1: "I thought it was enough to just install Firefox" * Person 2: "You're not blocking ads to protect your pc?" * Person 3: "Y'all are allowing sites to run scripts on non-virtualized systems?" * Person 4: "Y'all are allowing scripts?"

top 50 comments

sorted by: hot top controversial new old
[–] 87 points 1 month ago (26 children)

Honestly, it's bonkers that the standard, default approach for all mainstream browsers is to let every random website in the world run any arbitrary code it wants on your computer.

Yeah, they usually attempt to sandbox it, but still. Sometimes sandboxes can be escaped. And sometimes the code can do significant harm while still inside its sandbox.

  • source
  • hideshow 26 child comments
  • [–] 38 points 1 month ago* (21 children)

    Most websites would break, or not even display, without javascript. Sure, it's bonkers for you, but an alternative browser that can't immediately show a website that works perfectly well in Chrome wouldn't get much of a user base.

  • source
  • parent
  • hideshow 21 child comments
  • [–] 44 points 1 month ago (6 children)
  • load more comments (3 replies)
  • [–] 7 points 1 month ago*

    Most websites would break, or not even display, without javascript.

    I use NoScript -- I'm well aware.

    But a lot of those websites could function without javascript. A lot of websites use it unnecessarily, for reasons such as:

    • They want their ads and trackers and other malicious code (such as soft paywalls) to work as intended.

    • They want to add fancy cosmetic elements to the content and are too lazy to think about failing gracefully and still displaying the content if javascript isn't working.

    • They built the website in a framework that depends on javascript, and are again too lazy to bother worrying about graceful failure if javascript isn't working, even if their content could, in theory, be displayed just fine without it. (Or maybe the framework developers deserve a bit of the blame for that laziness, since they could have made graceful failure a feature of the framework, but chose not to.)

    In a hypothetical world where most browsers didn't allow every website to run arbitrary code, then every website would be forced to take that into account and only depend on javascript when it's absolutely necessary for the website's core functions.

  • source
  • parent
  • load more comments (9 replies)
  • load more comments (4 replies)
    [–] 70 points 1 month ago (36 children)

    You are allowing webpages to load?

  • source
  • hideshow 36 child comments
  • [–] 57 points 1 month ago (34 children)
  • [–] 47 points 1 month ago (7 children)
  • [–] 44 points 1 month ago (5 children)
  • [–] 28 points 1 month ago (4 children)
  • load more comments (1 reply)
  • load more comments (26 replies)
  • [–] 53 points 1 month ago (40 children)

    Those last two panels are so far past the inconvenience I'd ever be willing to put up with. I'm not sure how it could ever be worth it.

  • source
  • hideshow 40 child comments
  • [–] [S] 15 points 1 month ago (25 children)

    Bottom left is a super-convenient built-in feature of Qubes OS, via qubes-whonix. I just click a button and a new disposable whonix qube is generated from the template, and it only takes seconds to boot. When I'm done with it, I close the window, and the disposable qube is automatically deleted.

    Bottom right is my default, since I don't like broken sites.

  • source
  • parent
  • hideshow 25 child comments
  • [–] 12 points 1 month ago (24 children)

    Okay I just did some cursory research and it doesn't sound simple. Is it just installing qubes-whonix and creating a template (I'm guessing a yaml config or similar)?

    As far as sites with JavaScript being "broken", that one puzzles me. I have tried turning off JavaScript in the past and probably 70% of websites became fully non functional. That shouldn't be the case, but it often is, and my impression has been that this has gotten worse, not better. I'm a web developer and no one talks about progressive enhancement anymore and frankly my coworkers have mostly thought it's silly to even try to support users who turn off JavaScript.

  • source
  • parent
  • hideshow 24 child comments
  • [–] [S] 10 points 1 month ago (23 children)

    Okay I just did some cursory research and it doesn't sound simple. Is it just installing qubes-whonix and creating a template (I'm guessing a yaml config or similar)?

    During the installation of Qubes OS, you can select a checkbox to have Whonix templates and qubes automatically installed. After installation, you can simply click a launcher to start an app like Tor browser in a new disposable whonix qube from the disposable whonix template. It really is that simple. Installing Qubes OS does take a while though.

    As far as sites with JavaScript being "broken", that one puzzles me. I have tried turning off JavaScript in the past and probably 70% of websites became fully non functional.

    Yes, those sites which become non-functional without javascripts are very much broken.

    That shouldn't be the case, but it often is, and my impression has been that this has gotten worse, not better.

    Yes, much of the web is broken. On a related note, much of the web is infested with malicious ads and trackers.

    I'm a web developer and no one talks about progressive enhancement anymore and frankly my coworkers have mostly thought it's silly to even try to support users who turn off JavaScript.

    That's a shame. And yeah, those are basically just dead sites. If they're non-functional then there's really no point for them to exist.

    As the web continues to devolve, with a growing graveyard of dead sites (and an increasing prevalence of malicious scripts), I hope that more people wake up to the reality that this is bad. It's similar to the dead-end that is google's android. Eventually they'll pull it away and leave a lot of people scrambling for their next option. I think the modern web will go through a similar transformation one day. I hope so.

  • source
  • parent
  • hideshow 23 child comments
  • load more comments (23 replies)
  • [–] 6 points 1 month ago (8 children)

    I tried it for a while. I got caught up in the 'privacy' crowd on Reddit and went all out for a bit. Even de-googled my Android phone at the time. It is inconvenient as fuck. And you're going to be spending more time tinkering and looking for workarounds and alternate software than actually ever getting anything done. All just to stop an advertising company from detecting what you clicked on, or for the website owner to never get any telemetry.

  • source
  • parent
  • hideshow 8 child comments
  • load more comments (1 reply)
  • load more comments (5 replies)
    [–] 28 points 1 month ago (12 children)

    I have never heard the bottom left take anywhere before, though.
    Having said that, Firefox+ublock+noscript rules.

  • source
  • hideshow 12 child comments
  • [–] [S] 30 points 1 month ago (4 children)

    I have never heard the bottom left take anywhere before, though.

    ✨️ until now ✨️

  • source
  • parent
  • hideshow 4 child comments
  • [–] 24 points 1 month ago* (3 children)

    "You are, without doubt, the strangest online-script user I've ever heard of."
    "But you have heard of me!"

    ;-)

    [Edit: Sorry, slipped into wrong language before...]

  • source
  • parent
  • hideshow 3 child comments
  • [–] 8 points 1 month ago (6 children)

    You can block JavaScript with uBlock, BTW!

  • source
  • parent
  • hideshow 6 child comments
  • [–] 7 points 1 month ago (5 children)

    Had a look into the ublock settings.
    The one I found seems to be more of a nuke-grade total disabling, as opposed to the fine-grained approach of the noscript extension.

  • source
  • parent
  • hideshow 5 child comments
  • load more comments (3 replies)
  • [–] 27 points 1 month ago (9 children)

    I can't convince my wife to even use an add blocker, because it makes some (terrible) websites unusable (and you need an entire one additional click to disable it, it's too much effort), blocking JS would make the entire internet unusable for normies.

  • source
  • hideshow 9 child comments
  • [–] [S] 24 points 1 month ago

    bonus meme:

    Top text: "I don't always enable javascript," Bottom text: "but when I do, it's in a disposable whonix qube"

  • source
  • [–] [S] 12 points 1 month ago (4 children)

    Hey, so there are a few threads I can't see from this instance due to defederations and I wanna respond anyway.

    @Digit@lemmy.today open dyslexia font? nice touch.

    Thanks. Yeah, it's OpenDyslexicAlta Bold. It felt like a good option for a meme font that was kinda different and maybe easy enough to read to make it useful too.

    @Onomatopoeia@lemmy.cafe That makes it easier for dyslexics?

    Possibly for some, as @Ludicrous0251@piefed.zip said. I think it would probably be more beneficial for those who are introduced to it at a young age. Otherwise it takes some time to get used to it, and I did end up falling back to the fonts I had been using. But I do like OpenDyslexicAlta font and think it makes a good meme font, so yeah.

    Okay so that's my response to the chain of comments quoted above. Sorry I can't give y'all upvotes due to the defederation, and sorry it took me so long to realize there were comments which were hidden from me. I do try my best to respond to everything that seems directed at me or which I can offer a worthwhile response.

    The next chain of comments is much longer (it's a really good one too), and I'm thinking I'll make one or more responses when I get back online a while from now.

    🩷

  • source
  • hideshow 4 child comments
  • load more comments (4 replies)
    [–] 12 points 1 month ago (2 children)

    Does this comic use that dyslexic font? If so, nice touch.

  • source
  • hideshow 2 child comments
  • [–] 9 points 1 month ago (3 children)

    open dyslexia font?

    nice touch.

  • source
  • hideshow 3 child comments
  • [–] 9 points 1 month ago* (4 children)

    I'm currently testing just outright blocking all scripts through uBO, and to be honest it is not usable. I will use it for a little longer, then for sure disable it. A lot of websites just refuse to load (thanks, SPAs), and those that do often have little interactions that break, thus making the pages hard to use or even outright unusable.

    To give some examples for those that haven't tried this: images may refuse to load (js based lazy load implementation), dropdown menus almost never work, search option usually doesn't work (and if it does it's only because it goes to a different page, which is fair), comments probably won't show up, pretty much anything "live" won't work. Oh and let's not forget the captchas and all the proof-of-work blockers.

    For me the only really interesting part about this experience is that imgur refuses to load, even if you have a direct link to an image.

  • source
  • hideshow 4 child comments
  • load more comments (4 replies)
    [+] 8 points 1 month ago* (last edited 1 month ago) (18 children)
  • [–] 13 points 1 month ago* (last edited 1 month ago) (9 children)

    This disabling scripts thing is really for hardcore privacy enthusiasts. Just install librewolf on your linux box, change the DNS on your router to block ads and you're good.

    The reason i say it's for enthusiasts is that it will break everything as soon as you do it. And i mean it. The modern web is not useful without java script. Only websites designed specifically for working without javascript will still work.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 8 points 1 month ago (2 children)

    I use noscript extension and so every new site I access I have to whitelist it if I don't find it too sus

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (6 replies)
  • [–] [S] 7 points 1 month ago (3 children)

    It depends on the site. Some sites which leverage javascripts are still usable without the scripts. And there is a spectrum of usability. Lemmy is a good example. Most lemmy instances which are open to the public (without captchas or login) are generally usable without javascripts. Some features don't work, but knowing the path to the page allows manually getting there without javascript buttons. So like, adding /?sort=TopHour to the end of a lemmy instance's url sets the sorting for the page to top posts in the past hour. However, some other features don't seem to work at all. But then there are lemmy instances which utilize mlmym, which basically replicates old reddit and works 100% without javascripts. And then there are instances like mbin, which is designed to be a modern fediverse experience which does not require any javascripts, and it works very well.

    When I load a site, any site, if I get a blank page or a bunch of placeholders for javascript elements, I just close the tab and move on. Sometimes if I'm curious, I'll switch from "Basic Page Style" to "No Style" (Alt+V Y N) to see if there's anything hidden beneath the surface.

  • source
  • parent
  • hideshow 3 child comments
  • load more comments (3 replies)
  • load more comments (4 replies)
    [–] 7 points 1 month ago

    Its not related to this but Tempermonkey amd scripts is insanely good experience.

  • source
  • load more comments
    view more: next β€Ί