Live data from Hacker News

Please disable JavaScript to view this site

heydonworks.com

231–240 of 281 posts

Re: Please disable JavaScript to view this site

#231

Earlier quoted context omitted.

Of course it isn't. Pihole and similar DNS-based blockers do nothing for those kinds of spam which require performing DOM manipulations to be removed. Check uBlock settings after installing it. It has a separate "annoyances" list. I enabled everything in it a few years ago and never had a single problem. It removes all the GDPR banners, "please give us your email" popups, useless "oh I am so original" plates in forum…

I wasn't aware of this option in settings. Thanks.

If the default annoyances lists aren't enough for you you can also add this one[1]

[1] https://github.com/yourduskquibbles/webannoyances

Re: Please disable JavaScript to view this site

#232

I must say, I don't understand the disable JS movement. I browse with JS on, and uBlock Origin to block ads. It's rare that I have any javascript-related problems in my web browsing. On the other hand, I definitely use a number of sites that rely on javascript for useful purposes. If you're worried about tracking, you can block ads and tracking scripts without disabling javascript. If you're worried about viruses, we…

On a great many web sites I have to spend the first 60 seconds on the site clicking on "X" boxes in popups to make them go away. In many cases there are actually several layers of popups obscuring the content, and some are delayed so they only pop up after you start reading the content. No I do not want to subscribe to your mailing list. No I don't want to take your survey. No I do not want to "chat" with your bot-pr…

Personally I usr stock ublock origin and sponsorblock. Thesr 2 together work reasonably well.

Re: Please disable JavaScript to view this site

#233
post #218

Earlier quoted context omitted.

How is server-side rendering messy? It's just putting html strings together based on data, no frameworks or libraries needed.

That's what I mean. It feels much messier than JSX, where "putting strings together" is a clean first-class citizen. With SSR, you need some component that's aware of every change, and that triggers those re-renders at sensible times (every render takes server resources). This all feels messy, compared to rendering just-in-time on the client-side.

I wonder what use case you're talking about, I don't have a lot of cases where re-render needs to be dealt with, unless I'm making a web app like a multi player photoshop in the browser, in those cases I won't use SSR. For most information based sites, e.g. Hacker News, Twitter, there's no need to track change and re-render, all the data can be ready on the server side like querying database or making request to third party APIs, then it'll just be piecing HTML strings.

Re: Please disable JavaScript to view this site

#234

I must say, I don't understand the disable JS movement. I browse with JS on, and uBlock Origin to block ads. It's rare that I have any javascript-related problems in my web browsing. On the other hand, I definitely use a number of sites that rely on javascript for useful purposes. If you're worried about tracking, you can block ads and tracking scripts without disabling javascript. If you're worried about viruses, we…

Seeing as how this site is in part for job opportunity self-promotion, it seems like a decent way to weed out non-technical employers.

Re: Please disable JavaScript to view this site

#235

Earlier quoted context omitted.

I personally visit "a great many websites" daily, and rarely have this problem. Maybe it's uBlock doing it's job, or maybe it's the kind of site you go to?

Or maybe I need to try uBlock again rather than assuming my Pihole is as good as it gets. Thanks for the suggestion.

Pihole blocks server requests but ublock can do a whole lot more to the page by blocking specific html, css, and scripts. Ublock will prevent YouTube ads, for example, whereas pihole cannot as they come from the same server as the content.

Re: Please disable JavaScript to view this site

#236
post #147

I’d love to get rid of JS for my personal sites, but I know of no clean and simple way to render dynamic content otherwise. Server-side rendering seems a bit messy. I want a clean REST API separate from the UI. How can I generate pages with dynamic content easily? Ideally with absolute minimal dependencies.

It does feels messy if you insist on using rest api for your server-side pages (rendering react components in server-side?). Just abandon it and use html template-based system instead, like what most server-side frameworks do (django, rails, laravel, etc).

Re: Please disable JavaScript to view this site

#237

Earlier quoted context omitted.

As someone who has JS off by default (via uMatrix) I see a blank page.

Does uMatrix still exist (maintained)? I remember reading it is being discontinued. (I occasionally used it for curiosity, but found it too tedious in the long term. I have settled on CookieAutoDelete, which seem to address most tracking. Not many seem to run a completely server based fingerprint database.)

It is not maintained but the latest version[1] still works fine, and I will continue to run it until that is no longer the case.

[1] A beta that you can download from the github page. I assume the latest stable version also works fine, but the beta had a few additional bugfixes and features and I haven't encountered any instability.

Re: Please disable JavaScript to view this site

#238
post #94

Earlier quoted context omitted.

>DNS most people don't run their own resolvers, so at best you're fingerprinting DNS server of the ISP. >http caches can be easily cleared, or mitigated entirely by extensions or browser (eg. multi account containers).

> most people don't run their own resolvers, so at best you're fingerprinting DNS server of the ISP. That’s not how it’s tracked commonly. Similar to HTTP caches, you can fingerprint visitors by how quickly a domain request resolves for them. Sure, all of this can be mitigated. But you have to even know what to mitigate. And given the most fanatical privacy folks aren’t aware of basic timing fingerprints is a good in…

If js were removed from the web tomorrow, the people currently working on tracking protection against js could instead focus on these other mechanisms. Because privacy is an arms race, reducing attack surface is not pointless even if the same tracking can be achieved by other means.

Re: Please disable JavaScript to view this site

#239
post #35

This website does not track you . Correction -> This website does not track you via JS. You have no idea what's logged on the backend.

Ye olde days of tracking just used invisible .gifs and every click was a different webpage so they just tracked which ones were requested to gain interaction metrics. JS doesn't have any magic to it, location information is opt-in, but your IP is a much better advertising identifier.

> your IP is a much better advertising identifier

Citation needed?

Re: Please disable JavaScript to view this site

#240

In my view, micrototalitarian actions like this are every bit as bad as the ills they seek to cure. Insisting on infringing the liberty of others, before even so much as talking to another person is the very core of what ails our society in this time.

The microdictator is amused: https://twitter.com/heydonworks/status/1333058648365535235
Post reply on HN