Live data from Hacker News

Please disable JavaScript to view this site

heydonworks.com

111–120 of 281 posts

Re: Please disable JavaScript to view this site

#111

As someone who has JS off by default for a long time (ever since I discovered how much it could remove annoyances, and this was back when SPAs were basically nonexistent) and is thus often subjected to "Please enable JS" messages which more likely than not will simply make me click the back button[1], I am delighted to see this exists --- I've thought of the idea before, but never did anything with it: https://news.y…

As someone who has JS off by default (via uMatrix) I see a blank page.

Re: Please disable JavaScript to view this site

#112

In my view, micrototalitarian actions like this are every bit as bad as the ills they seek to cure. Insisting on infringing the liberty of others, before even so much as talking to another person is the very core of what ails our society in this time.

I'd argue that wild histrionics as you have just demonstrated are worse than whatever this is (which certainly does not infringe on anyone's liberty).

Spot on.

Re: Please disable JavaScript to view this site

#114
post #35

This website does not track you . Correction -> This website does not track you via JS. You have no idea what's logged on the backend.

It logs requests to the site, which is far less invasive than the fine detail of browser fingerprinting and tracking that JS allows: JS can see your mouse pointer's position, how long you spent on each area of the page, which parts of the text you selected, and many many other things. Things like this are seriously creepy: https://www.crazyegg.com/blog/mouse-recorder/

There are many companies with similar products: Inspectlet, Lucky Orange, probably more. This is a cat that will be quite difficult to put back in the bag.

Re: Please disable JavaScript to view this site

#115

As someone who has JS off by default for a long time (ever since I discovered how much it could remove annoyances, and this was back when SPAs were basically nonexistent) and is thus often subjected to "Please enable JS" messages which more likely than not will simply make me click the back button[1], I am delighted to see this exists --- I've thought of the idea before, but never did anything with it: https://news.y…

As someone who has JS off by default (via uMatrix) I see a blank page.

I use NoScript and it works fine for me.

Re: Please disable JavaScript to view this site

#116
post #51

Earlier quoted context omitted.

In which occasion a software ootb like a browser won’t have JavaScript enabled? I’m genuinely curious, the only time I saw something like this was using the distro Kali having no script in Firefox.

lynx links w3m that's just off the top of my head.

Dillo and Netsurf won't have JS too, and they are graphical browsers.

Re: Please disable JavaScript to view this site

#118
post #91

Earlier quoted context omitted.

back in the '90s I was into connecting to IRC servers using spoofed IP addresses. The way it worked is you told the software what OS you were connecting to (or it would figure it out itself, I can't recall). Each OS had a unique way of generating TCP sequence numbers, which allowed the software to guess which number would come next. Nowadays OSes have protection for this sort of thing. But I'd imagine you could still…

How are you going from guessing TCP sequences to spoofing IP addresses on TCP connections? Did you breeze over a step or am I missing something obvious?

The mitigations for spoofing sequence numbers might be different for each OS, and that would allow the OS to be fingerprinted. See nmap's OS fingerprinting, for example.

Re: Please disable JavaScript to view this site

#119
post #51

Earlier quoted context omitted.

In which occasion a software ootb like a browser won’t have JavaScript enabled? I’m genuinely curious, the only time I saw something like this was using the distro Kali having no script in Firefox.

lynx links w3m that's just off the top of my head.

Yeah, my first instinct was lynx. Works fine...

Re: Please disable JavaScript to view this site

#120
post #96
post #32

Earlier quoted context omitted.

Fair enough. For me, using the "Toggle js on and off" extension on Firefox 83.0 on Ubuntu, I see a blank page.

The reason you see a blank page is because the website wraps content into a tag and by "disabling javascript" it wants you to render content, not actually disable javascript. But it's a bad idea in practice. Most websites work better out of the box if you disable javascript, but not render , and also disable CSS, and inject some custom style to fix size of embedded icons. I'm not sure if there is a public extension t…

I really don't think that's true. For one thing, anything beyond static content sites are just not going to work. And even content sites could well be unusable without their layout CSS. I really don't see the point in subjecting oneself to such hassle.

I would suggest that most websites work better if you have javascript and CSS enabled, since that's what they were designed for, but use an ad blocker like uBlock matrix to remove the ads.

Post reply on HN