Please disable JavaScript to view this site • Hacker News Board

Re: Please disable JavaScript to view this site

#21

Post by krapp » Sat, Nov 28, 2020, 9:12 PM UTC

usr1106 wrote: post #13

So running untrusted code on your computer is a bad thing. Well, it should be in a sandbox, but that has many intentional and proably some less intentional holes to do stuff on your machine. So how do I trace what Javascript is doing on my machine? Generally mitmproxy gives a feeling what sites the browser talks too. And strace gives often a good feeling what a Linux binary does. But the browser is too big and compli…

>Can anybody recommend a tool to look what Javascript code loaded by a certain page is doing?

Almost all modern browsers have debug panels that will list all of the requests made by a page, assets cached, cookies and local db, and of course it's trivial to just view the source of a site and read the javascript if it isn't compressed.

Re: Please disable JavaScript to view this site

#22

Post by capableweb » Sat, Nov 28, 2020, 9:13 PM UTC

usr1106 wrote: post #13

So running untrusted code on your computer is a bad thing. Well, it should be in a sandbox, but that has many intentional and proably some less intentional holes to do stuff on your machine. So how do I trace what Javascript is doing on my machine? Generally mitmproxy gives a feeling what sites the browser talks too. And strace gives often a good feeling what a Linux binary does. But the browser is too big and compli…

> Can anybody recommend a tool to look what Javascript code loaded by a certain page is doing?

Open your browser's developer tools, go to the Script/Debugger tab and have at it. It's just about as obtuse to use as a tool as gdb, but you'll see exactly what it does. Chrome dev tools has automatic formatting of the code, maybe firefox too. But you'll be stuck with shitty variable names if they been mangled. Although you could try http://www.jsnice.org/, I had variable luck with using it.

It would be interesting to have a browser tool that is like strace and you could filter by calls, so you can see exactly where window.navigator is being used for example, or localStorage.setItem. For now best you can do is searching for "navigator" which works, but can be minified/hidden away by coder as well.

Re: Please disable JavaScript to view this site

#23

Post by pmontra » Sat, Nov 28, 2020, 9:13 PM UTC

Joeboy wrote: post #17

After disabling js I get a blank page in Firefox. Is that right? CBA to decipher the source or work out how to disable js in Chromium.

I disabled it with 4 taps in uBlock Origin, Firefox Android. Open menu, Add-ons, uBlock Origin, the JavaScript icon. Then another tap to reload the page, the back button and the site did show.

Re: Please disable JavaScript to view this site

#24

Post by fastball » Sat, Nov 28, 2020, 9:15 PM UTC

CodeWriter23 wrote: post #16

In my view, micrototalitarian actions like this are every bit as bad as the ills they seek to cure. Insisting on infringing the liberty of others, before even so much as talking to another person is the very core of what ails our society in this time.

I'd argue that wild histrionics as you have just demonstrated are worse than whatever this is (which certainly does not infringe on anyone's liberty).

Re: Please disable JavaScript to view this site

#25

Post by nxrabl » Sat, Nov 28, 2020, 9:16 PM UTC

teknopurge wrote: post #6

aftbit wrote: post #3

But there's nothing on this site once you do disable JavaScript. I was hoping for a 2020 take on a server-side rendered web app.

I see what you did there.... In other news, possibly the best designed website of 2020: http://www.muskfoundation.org/

Even that website uses Javascript though (to add a Yahoo tracking pixel, it looks like. What is there even to track?)

Re: Please disable JavaScript to view this site

#26

Post by fastball » Sat, Nov 28, 2020, 9:16 PM UTC

teknopurge wrote: post #6

aftbit wrote: post #3

But there's nothing on this site once you do disable JavaScript. I was hoping for a 2020 take on a server-side rendered web app.

I see what you did there.... In other news, possibly the best designed website of 2020: http://www.muskfoundation.org/

No HTTPS tho.

Re: Please disable JavaScript to view this site

#27

Post by kreeben » Sat, Nov 28, 2020, 9:18 PM UTC

cbsks wrote: post #18

thex10 wrote: post #9

Thanks to this I learned how to disable JS on iOS Safari. An annoying number of clicks. So thanks for that I guess

Is there a way to disable JavaScript per website on iOS? Or an alternate iOS browser that supports it?

I do that with Firefox + uBlock Origin. FF is available on mac.

Re: Please disable JavaScript to view this site

#28

Post by fastball » Sat, Nov 28, 2020, 9:19 PM UTC

Joeboy wrote: post #17

After disabling js I get a blank page in Firefox. Is that right? CBA to decipher the source or work out how to disable js in Chromium.

It's a personal CV-type website.

Here[1] is the link to disabling JS for a site in Chromium.

[1] chromium://settings/content/javascript

Re: Please disable JavaScript to view this site

#29

Post by mark-r » Sat, Nov 28, 2020, 9:19 PM UTC

s1k3s wrote: post #20

mtmail wrote: post #15

Earlier quoted context omitted.

Similar a company with 250 billion USD revenue (2019) https://www.berkshirehathaway.com/

"Reproduction or distribution of any materials obtained on this website or linking to this website without written permission is prohibited." https://www.berkshirehathaway.com/disclaimer.html What? :)

Haven't the courts ruled you don't need permission to have a link?

Re: Please disable JavaScript to view this site

#30

Post by usr1106 » Sat, Nov 28, 2020, 9:20 PM UTC

krapp wrote: post #21

usr1106 wrote: post #13

So running untrusted code on your computer is a bad thing. Well, it should be in a sandbox, but that has many intentional and proably some less intentional holes to do stuff on your machine. So how do I trace what Javascript is doing on my machine? Generally mitmproxy gives a feeling what sites the browser talks too. And strace gives often a good feeling what a Linux binary does. But the browser is too big and compli…

>Can anybody recommend a tool to look what Javascript code loaded by a certain page is doing? Almost all modern browsers have debug panels that will list all of the requests made by a page, assets cached, cookies and local db, and of course it's trivial to just view the source of a site and read the javascript if it isn't compressed.

Yes, I am aware of dev tools. I use them to look at network requests or to "steal" my own credentials for curl usage.

Haven't really used the Javascript debugger, but my guess would be completely infeasible to follow everything a random "modern" Web site might do. And as you say some Javascript might be compressed or obfuscated. What I really would want is a somewhat higher level / more filtered approach: Like strace lets me just trace file operations for example.