Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Please disable JavaScript to view this site

heydonworks.com

Post reply on HN
Print view View original

131–140 of 281 posts

Re: Please disable JavaScript to view this site

#131

Post by chaps »

deckard1 wrote: post #90
darkwater wrote: post #58

Earlier quoted context omitted.

IP behind NAT or CGNAT is not that useful, but many mobile browsers (especially cheap Androids) leak so many trackable details through headers that makes easier to uniquely identify devices/users

back in the '90s I was into connecting to IRC servers using spoofed IP addresses. The way it worked is you told the software what OS you were connecting to (or it would figure it out itself, I can't recall). Each OS had a unique way of generating TCP sequence numbers, which allowed the software to guess which number would come next. Nowadays OSes have protection for this sort of thing. But I'd imagine you could still…

Yep, `nmap -O` works pretty well!

Re: Please disable JavaScript to view this site

#132

Post by teknopurge »

SquareWheel wrote: post #117
teknopurge wrote: post #107

Earlier quoted context omitted.

It doesn't need https.

Of course it does. Otherwise intermediaries can inject ads, tracking, spoof the content, or even redirect it to a malicious page.

https does not 100% prevent any of those things.

Re: Please disable JavaScript to view this site

#133

Post by zamalek »

tempestn wrote: post #124

I must say, I don't understand the disable JS movement. I browse with JS on, and uBlock Origin to block ads. It's rare that I have any javascript-related problems in my web browsing. On the other hand, I definitely use a number of sites that rely on javascript for useful purposes. If you're worried about tracking, you can block ads and tracking scripts without disabling javascript. If you're worried about viruses, we…

> If you're worried about viruses [...]

Not to mention that a host of vulnerabilities were image related a few years back (one of the original rookits exploited a TGA bug).

> uBlock Origin

Honestly, this is the antivirus of the web. I helped my niece set up my old computer for Minecraft today, and she was explaining how her friend had installed viruses (adware, really) 3 times. Every one of those instances was caused by download link confusion for Minecraft mods. Disabling JavaScript isn't going to save you from being tricked into downloading shady software, only an adblocker will.

Re: Please disable JavaScript to view this site

#134

Post by dylan604 »

zamadatix wrote: post #49
s1k3s wrote: post #35

This website does not track you . Correction -> This website does not track you via JS. You have no idea what's logged on the backend.

There are also ways to track you on the front end without JS but I think "This website will not… track you" is just a promise from the not something that followed from the lack of JS anyways.

It could also be a canary in case the site gets bought out, and the new owner wants to implement invasive tracking. If a site has "will not track you" when you visit it, but the next visit it is removed...

Re: Please disable JavaScript to view this site

#135

Post by dylan604 »

userbinator wrote: post #67

As someone who has JS off by default for a long time (ever since I discovered how much it could remove annoyances, and this was back when SPAs were basically nonexistent) and is thus often subjected to "Please enable JS" messages which more likely than not will simply make me click the back button[1], I am delighted to see this exists --- I've thought of the idea before, but never did anything with it: https://news.y…

>make me click the back button

I forget about the back button. By default, I always open links in new tabs which means back button has no data. Also, SPAs have hijacked the back button or just broken it completely, so I've been trained to not count on it behaving as expected. There's also mobile experience where getting to the back button itself is often painful after the UI hides navigation from you.

Otherwise, I am 100% in agreement. If a page is so user hostile to not making a friendly non-JS page, the tab gets closed

Re: Please disable JavaScript to view this site

#136

Post by dx87 »

tempestn wrote: post #124

I must say, I don't understand the disable JS movement. I browse with JS on, and uBlock Origin to block ads. It's rare that I have any javascript-related problems in my web browsing. On the other hand, I definitely use a number of sites that rely on javascript for useful purposes. If you're worried about tracking, you can block ads and tracking scripts without disabling javascript. If you're worried about viruses, we…

I keep it disabled just so sites load faster. Except for 1 or 2 sites, I don't care about anything except for the main text on a page, so it's a waste of time to let a ton of javascript run and load/format things that I don't care about.

Re: Please disable JavaScript to view this site

#137

Post by dragonwriter »

dylan604 wrote: post #135
userbinator wrote: post #67

As someone who has JS off by default for a long time (ever since I discovered how much it could remove annoyances, and this was back when SPAs were basically nonexistent) and is thus often subjected to "Please enable JS" messages which more likely than not will simply make me click the back button[1], I am delighted to see this exists --- I've thought of the idea before, but never did anything with it: https://news.y…

>make me click the back button I forget about the back button. By default, I always open links in new tabs which means back button has no data. Also, SPAs have hijacked the back button or just broken it completely, so I've been trained to not count on it behaving as expected. There's also mobile experience where getting to the back button itself is often painful after the UI hides navigation from you. Otherwise, I am…

> By default, I always open links in new tabs which means back button has no data.

I really wish, even if it was an optional setting, browsers would copy the past history of the source tab when you did that. If it hit back in a tab I opened that way, I still want “where I got here from” not “stay here” or “new tab page" or especially “close the tab” (thanks a lot Android Chrome).

Re: Please disable JavaScript to view this site

#138

Post by charrondev »

teknopurge wrote: post #132
SquareWheel wrote: post #117

Earlier quoted context omitted.

Of course it does. Otherwise intermediaries can inject ads, tracking, spoof the content, or even redirect it to a malicious page.

https does not 100% prevent any of those things.

How can someone spoof the page/inject ads if the site is served over https?

They would need to have compromised one of the root certificates on your machine to not give you a giant security warning.

In modern browsers there’s not even a button to bypass them (although I know I chrome you can type “this is unsafe” to a hidden input in the error page and it will let you bypass it temporarily).

Re: Please disable JavaScript to view this site

#139

Post by jrockway »

ciarannolan wrote: post #121
mtmail wrote: post #15

Earlier quoted context omitted.

Similar a company with 250 billion USD revenue (2019) https://www.berkshirehathaway.com/

There's an ad for Geico insurance at the bottom, lol. What's the deal with that?

Berkshire Hathaway owns Geico.
Post reply on HN