111–120 of 154 posts
Earlier quoted context omitted.
If your website requires active content in order to display plaintext, images and navigation, then yes, it is poorly developed. You failed to use the right tool for the job.
Navigation is typically comprised of text and/or images. Some websites need more than text or images.
Earlier quoted context omitted.
These are my thoughts (as a webdeveloper): We have 5 big browsers and 3 OS's that we need to support (different rendering, different canvas rendering, not to mention 3d rendering quircks, different installed fonts), I think we don't need yet another way to make our lives difficult. I understand that privacy is a big issue, but think about "normal" web developers who just want to show a cool working website to their u…
Good point. So maybe browsers should make the full version the default and then add the following options for more tech savvy users (and users can set the permanent default or per website setting): 1) full mode (all JS is enabled) 2) lite mode (only the bare JS is enabled, no tracking possible) 3) suggested mode (a machine learning algorithm decides what is really needed to be enabled and what is there for tracking p…
Earlier quoted context omitted.
Throwing web-interactivity (via Javascript) away today is like throwing your computer away. Computers help you be more productive, but it also helps the people who want to profile you. What's the alternative? If it's not Javascript, any functionality that offers access to the hardware (via however many layers) to "apps" from the "cloud" can be exploited this way. Maybe we should disallow hardware access, how will You…
> Throwing web-interactivity (via Javascript) away Javascript is not the only way to provide interactivity. CSS, for example, provides some form validation methods in a declarative style. Sometimes you can do it server-side. Many types of interactivity were possible before the current JS mess. If there is a type of common interactivity that is not supported without JS, we can always add it as a new browser features,…
Earlier quoted context omitted.
> I understand that privacy is a big issue, but think about "normal" web developers who just want to show a cool working website to their users, but need to display this message to them: "Thank you for looking at our website, but unfortunately your browser is in lite JavaScript mode. Please set it to full functionality again and restart your browser en go to our site once more.". My brain melted out of my ears when I…
As a developer in a web agency, we create a lot of "fancy" (= sites that are interesting to look at, and they need to draw attention) websites, no it is not to create a text fade that can be done in CSS btw. It is to validate forms with ajax, it is to display ajax loaded content, it is to upload a file without needing a page refresh, to create a simple image slider/viewer, ... Of course the content is king, but do no…
Earlier quoted context omitted.
It is similar to macros in Word documents
Is it, though? To the best of my knowledge, macros don't execute by default, silently, and in so doing facilitate my being tracked by people wanting to sell me generic brand pharmaceuticals.
Identity (as in a stable handle for your browser/device/profile) is an important part of the web. It's tied into all kinds of functionality and security. What we really need is a device/OS level "ID" that can be read by any app or website so that it is stable. Since it's controlled by the OS, resetting your identity is as simple as generating a new ID. This single change would improve security and performance across…
You want that centralized and made universal? An internet passport? Goodbye vpn services. Goodbye, tor. Goodbye doing anything that's not in your permanent browsing profile stored by advertisers, google, facebook, twitter.
Earlier quoted context omitted.
Nothing much. What do you think could go wrong?
I don't know, maybe massive pwnage? I'm sure you know that and are just being difficult. Its because OpenGL/DirectX drivers run a large compiler in the kernel and then send the compiled code to the GPU. None of that code is inspectable. Drivers routinely have special hacks to tweak the performance of particular games or matching patterns of use that tweak special paths, making thorough testing particularly hard. http…
Any real examples besides proofs of concept and academic concerns? As in, examples that affect the average user, not some specifically targeted person?
Identity (as in a stable handle for your browser/device/profile) is an important part of the web. It's tied into all kinds of functionality and security. What we really need is a device/OS level "ID" that can be read by any app or website so that it is stable. Since it's controlled by the OS, resetting your identity is as simple as generating a new ID. This single change would improve security and performance across…
Services where security matters already manage it: they have a handful of contact points for each user, and they alert when an unknown browser/device/profile logs into the service. You want that centralized and made universal? An internet passport? Goodbye vpn services. Goodbye, tor. Goodbye doing anything that's not in your permanent browsing profile stored by advertisers, google, facebook, twitter.
Client-side control means that you can turn it off depending on TOR, private-mode, VPN, or whatever else. The technical aspects though would make the web faster and easier to deal with.
Identity (as in a stable handle for your browser/device/profile) is an important part of the web. It's tied into all kinds of functionality and security. What we really need is a device/OS level "ID" that can be read by any app or website so that it is stable. Since it's controlled by the OS, resetting your identity is as simple as generating a new ID. This single change would improve security and performance across…
This wouldn't give us any more privacy. It would just become another signal in the tracker's model, they wouldn't solely rely on it. Cookies were the same idea limited to a single website. We were told to clear our cookies and we could prevent tracking. We have seen what cookies have become, with zombie cookies[1][2] raising from the dead after we think they are gone. At the end of the day, advertisers and trackers d…
A single website is too narrow since things like ad networks (which are the economic backbone of the web) work across many sites. A single root domain is an outdated isolation model on the modern web.
Outside of that, the only other answer is regulation. Something that is missing in many areas although some countries seem to be making good progress.