Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Please disable JavaScript to view this site

heydonworks.com

Post reply on HN
Print view View original

61–70 of 281 posts

Re: Please disable JavaScript to view this site

#61

Post by hoistbypetard »

yjftsjthsd-h wrote: post #43
patrec wrote: post #33

Earlier quoted context omitted.

You can assign a keyboard shorcut to that easily (I bound it to Cmd+Shift+J and find it super-handy): https://support.apple.com/en-gb/guide/mac-help/mchlp2271/mac If someone knows how to achieve the same on Linux for Chrome and Firefox, I'd love to hear it (browser plugins are a bit of a security and stability shitshow, so non-plugin solution would be preferred, all else being equal).

Mozilla removed the normal settings toggle a while back, so your options are to manually set javascript.enabled in about:config or use an extension. I agree in general that extensions aren't great, but I trust uBlock. I think Chrome actually is fine although I don't know of a keybinding for it: Don't they still have a toggle right in the site menu (click the icon to the left of the URL to toggle all kinds of these th…

In Vivaldi (which I'm 99% certain matches chrome for this part) you click the icon to the left of the URL and then click "Site Settings" at the bottom of the resulting menu where you can toggle a slew of permissions, including javascript.

It's about the best UI I could come up with for this particular knob and the other things adjacent to it.

Re: Please disable JavaScript to view this site

#62

Post by TJSomething »

usr1106 wrote: post #30
krapp wrote: post #21

Earlier quoted context omitted.

>Can anybody recommend a tool to look what Javascript code loaded by a certain page is doing? Almost all modern browsers have debug panels that will list all of the requests made by a page, assets cached, cookies and local db, and of course it's trivial to just view the source of a site and read the javascript if it isn't compressed.

Yes, I am aware of dev tools. I use them to look at network requests or to "steal" my own credentials for curl usage. Haven't really used the Javascript debugger, but my guess would be completely infeasible to follow everything a random "modern" Web site might do. And as you say some Javascript might be compressed or obfuscated. What I really would want is a somewhat higher level / more filtered approach: Like strace…

I'm not sure if it always works on all APIs or browsers, but you can wrap and replace DOM API objects with logging proxies.

Additionally, you can set breakpoints on event handlers and Chromium has deobfuscation built in. You can usually tell approximately what's going on by stepping through the code and watching the variables in local scope.

Re: Please disable JavaScript to view this site

#63

Post by slondr »

syx wrote: post #51
Zebfross wrote: post #5

I prefer making all my sites work just as well without JavaScript as with it. This is cool though if you need a quick check to see if JavaScript is enabled.

In which occasion a software ootb like a browser won’t have JavaScript enabled? I’m genuinely curious, the only time I saw something like this was using the distro Kali having no script in Firefox.

Tor used to have noscript set to the highest level, but in recent years they've changed that.

Re: Please disable JavaScript to view this site

#65

Post by Scarbutt »

nxrabl wrote: post #25
teknopurge wrote: post #6

Earlier quoted context omitted.

I see what you did there.... In other news, possibly the best designed website of 2020: http://www.muskfoundation.org/

Even that website uses Javascript though (to add a Yahoo tracking pixel, it looks like. What is there even to track?)

Number of visitors per day, country origin, etc...

Re: Please disable JavaScript to view this site

#67

Post by userbinator »

As someone who has JS off by default for a long time (ever since I discovered how much it could remove annoyances, and this was back when SPAs were basically nonexistent) and is thus often subjected to "Please enable JS" messages which more likely than not will simply make me click the back button[1], I am delighted to see this exists --- I've thought of the idea before, but never did anything with it:

https://news.ycombinator.com/item?id=11411982

[1] I once enabled JS on a site that claimed it would provide "a better experience", and was bombarded with a bunch of ads and other irritations that just made me turn it off again. It was not a "better experience".

Re: Please disable JavaScript to view this site

#68

Post by darepublic »

ljm wrote: post #50
Zebfross wrote: post #5

I prefer making all my sites work just as well without JavaScript as with it. This is cool though if you need a quick check to see if JavaScript is enabled.

On my own site, any JS flourish has a noscript fallback. There's nothing major there in the first place, but it makes me happy to do that. The other rule is that the JS is all hand-written. No frameworks or other dependencies.

I've also been tinkering more with no framework js, although it's by way of typescript and webpack. And it's really fun, I think there are a lot of cases where you can just opt out of react or bootstrap if you know what you're doing

Re: Please disable JavaScript to view this site

#69

Post by userbinator »

s1k3s wrote: post #35

This website does not track you . Correction -> This website does not track you via JS. You have no idea what's logged on the backend.

It logs requests to the site, which is far less invasive than the fine detail of browser fingerprinting and tracking that JS allows: JS can see your mouse pointer's position, how long you spent on each area of the page, which parts of the text you selected, and many many other things.

Things like this are seriously creepy: https://www.crazyegg.com/blog/mouse-recorder/

Re: Please disable JavaScript to view this site

#70

Post by nullc »

userbinator wrote: post #67

As someone who has JS off by default for a long time (ever since I discovered how much it could remove annoyances, and this was back when SPAs were basically nonexistent) and is thus often subjected to "Please enable JS" messages which more likely than not will simply make me click the back button[1], I am delighted to see this exists --- I've thought of the idea before, but never did anything with it: https://news.y…

It didn't say who it was better for...
Post reply on HN