Live data from Hacker News

Why I'm turning JavaScript off by default

tommorris.org

11–20 of 79 posts

Re: Why I'm turning JavaScript off by default

#11
From the article: "The only person who is significantly injured by turning off JavaScript on my site is me, because it’s needed for the login system and posting UI".

To me this is more sad than the tenure of the article as JS should not be needed to do this at all, I do not need that on my website.

I also disagree with making everything uniform in usage as it brings boredom to the field, for me most exiting times in a field is when the uniformity hasn't kicked in yet, of course my opinion is personal.

I only use NoScript to safe my ass from scams and nasty people trying to encrypt your stuff and extort you for it, and it does it's job well for that.

On my website I mainly use scripting to bring luxury shortcuts for the people logged in, it works without all that for the outside world.

Re: Why I'm turning JavaScript off by default

#13
post #11

From the article: "The only person who is significantly injured by turning off JavaScript on my site is me, because it’s needed for the login system and posting UI". To me this is more sad than the tenure of the article as JS should not be needed to do this at all, I do not need that on my website. I also disagree with making everything uniform in usage as it brings boredom to the field, for me most exiting times in…

There may be stuff I add to my site that needs scripting. And I may take the scripting out for the login.

The posting UI is just for geolocation which you can't do without JS.

Re: Why I'm turning JavaScript off by default

#14

How would the author face new standards like Websockets and Server-Sent Events? Those standards requires some kind of client scripting. As a previous user has stated, the use of javascript is not the problem. It's the abuse of it.

Not use them unless absolutely necessary.

And not use websites that have them unless absolutely necessary.

Re: Why I'm turning JavaScript off by default

#15
I am much of the same mind as the author, and for a very long time my NoScript was configured to disallow all JS by default.

Sadly things have reached the point where this is just not realistic anymore. Too many websites just fail to work altogether, and I was spending way too much time whitelisting sites. And honestly, who has the time to check up on what each and every one of those is doing with their crappy JavaScript?

Reluctantly I've been forced to enable "Temporarily allow top-level sites by default". This way most sites work somewhat, except when a bunch of their JavaScript is delivered from their CDN - then it all breaks again. At that point I'm usually happy to just bounce from the site, but it is annoying.

In combination with a cookie-eater plugin, I have temporarily found a balance between keeping the web usable (FSV) and eating my own time micro-managing stuff like cookies, permissions and JS, but it's an uneasy truce.

Re: Why I'm turning JavaScript off by default

#16

I am much of the same mind as the author, and for a very long time my NoScript was configured to disallow all JS by default. Sadly things have reached the point where this is just not realistic anymore. Too many websites just fail to work altogether, and I was spending way too much time whitelisting sites. And honestly, who has the time to check up on what each and every one of those is doing with their crappy JavaSc…

This is why I'm keen on some kind of web of trust for this sort of stuff.

Re: Why I'm turning JavaScript off by default

#17

I am much of the same mind as the author, and for a very long time my NoScript was configured to disallow all JS by default. Sadly things have reached the point where this is just not realistic anymore. Too many websites just fail to work altogether, and I was spending way too much time whitelisting sites. And honestly, who has the time to check up on what each and every one of those is doing with their crappy JavaSc…

This is why I'm keen on some kind of web of trust for this sort of stuff.

Well, white-listing probably sorts out a big bunch of problematic sites.

My problem aren't pages like facebook or google, which I use everyday (even if facebook is kinda overloaded) but more the pages I don't know :\

Re: Why I'm turning JavaScript off by default

#18
The first thing that would fail is the ability to login to his own site, which uses Mozilla Persona and requires JavaScript.

To be fair, I'm very much in favour of reducing the amount that the browser does and to send less stuff to the browser.

I'm in favour of Tom's whitelisting approach and I used to believe this was the best way to consume the web. But that was back when most sites still had an idea of gracefully degrading and continuing to function.

Too much stuff breaks now, and I find that a blanket policy no longer works. Instead I user a combination of Disconnect, hosts files http://someonewhocares.org/hosts/zero/ , private/incognito browsing, to block per-site, to prevent bad stuff getting through, and to prevent sites abusing my use of their site (aggressively tracking and marketing).

But... by and large I now leave core JavaScript enabled. As too much breaks.

Some things will break any way (Omniture code that captures an onclick and breaks the anchor by default unless their JS is enabled). I feel that my setup is a pretty good median point though, between blocking junk and having the web remain usable.

Re: Why I'm turning JavaScript off by default

#19
> It’s a cargo cult: people do it because everyone else is doing it.

And that's one of the core problems of our society. The seed is planted by commercial interests we cultivate in our culture (the rat race for more money than your peers) and it grows, because we don't choose cooperation (as in "open-source software") over competition.

Re: Why I'm turning JavaScript off by default

#20

I am much of the same mind as the author, and for a very long time my NoScript was configured to disallow all JS by default. Sadly things have reached the point where this is just not realistic anymore. Too many websites just fail to work altogether, and I was spending way too much time whitelisting sites. And honestly, who has the time to check up on what each and every one of those is doing with their crappy JavaSc…

This is why I'm keen on some kind of web of trust for this sort of stuff.

OT: Do you have an email address? My work net filtering is blocking this blog for a bizarre but somewhat troubling reason.
Post reply on HN