Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TikTok tracks you across the web, even if you don’t use the app

consumerreports.org

Post reply on HN
Print view View original

151–160 of 214 posts

Re: TikTok tracks you across the web, even if you don’t use the app

#151

Post by ehnto »

klabb3 wrote: post #102
dijit wrote: post #40

Earlier quoted context omitted.

I really really wish that I could convince Web Developers that not every website needs to be a web app. I keep bringing up that I don't want JS to execute random code, even if it's sandboxed, it's mostly unnecessary, and I always get the same sort of replies. Everyone calls me out of touch, I'm downvoted to oblivion, everyone suggests that I'm a unique case and everyone wants JS, they say that they don't want fragmen…

Of all things that can be complained about, JS sandboxing is actually really hardened. I think the issue is the cross site wild west we have today. Cookies, requests etc go all over the place, when it should be isolated to same origin unless specific interactions are needed (and then they should probably be user facing and blockable). I think the real answer to why this hasn't been toothfully patched yet is ads and t…

CDNs were a huge mistake, they are the slow point of many websites and people don't even second guess importing fonts, images and libraries from half a dozen different providers. The pros are grossly overstated and the cons are many.

Re: TikTok tracks you across the web, even if you don’t use the app

#154

Post by Kiro »

vorticalbox wrote: post #133
magic_hamster wrote: post #114

Earlier quoted context omitted.

What options will you suggest for web developers instead? How can you develop a convenient user experience without js? Even the most simple things require it, and will likely use a third party framework.

Do you have some examples of things that require JS to do?

Upvoting a comment on Hacker News.

Re: TikTok tracks you across the web, even if you don’t use the app

#155

Post by vorticalbox »

Kiro wrote: post #154
vorticalbox wrote: post #133

Earlier quoted context omitted.

Do you have some examples of things that require JS to do?

Upvoting a comment on Hacker News.

actually that doesn't require javascript.

Up voting is done via a link.

https://news.ycombinator.com/vote?id={id}&how=up&auth={auth}

Re: TikTok tracks you across the web, even if you don’t use the app

#156

Post by Kiro »

vorticalbox wrote: post #155
Kiro wrote: post #154

Earlier quoted context omitted.

Upvoting a comment on Hacker News.

actually that doesn't require javascript. Up voting is done via a link. https://news.ycombinator.com/vote?id={id}&how=up&auth={auth}

https://news.ycombinator.com/item?id=11307758

Re: TikTok tracks you across the web, even if you don’t use the app

#157

Post by vorticalbox »

Kiro wrote: post #156
vorticalbox wrote: post #155

Earlier quoted context omitted.

actually that doesn't require javascript. Up voting is done via a link. https://news.ycombinator.com/vote?id={id}&how=up&auth={auth}

https://news.ycombinator.com/item?id=11307758

While true you can use HN just fine with JS disabled.

Re: TikTok tracks you across the web, even if you don’t use the app

#158

Post by Kiro »

vorticalbox wrote: post #157
Kiro wrote: post #156

Earlier quoted context omitted.

https://news.ycombinator.com/item?id=11307758

While true you can use HN just fine with JS disabled.

I could have said chat clients, games, maps or other things that absolutely require JavaScript. I said upvote on HN to illustrate that even the most basic site still needs some JS to create a sane experience. Having the page reload every time you upvote a comment is not a good alternative.

Re: TikTok tracks you across the web, even if you don’t use the app

#159

Post by jgaa »

klabb3 wrote: post #102
dijit wrote: post #40

Earlier quoted context omitted.

I really really wish that I could convince Web Developers that not every website needs to be a web app. I keep bringing up that I don't want JS to execute random code, even if it's sandboxed, it's mostly unnecessary, and I always get the same sort of replies. Everyone calls me out of touch, I'm downvoted to oblivion, everyone suggests that I'm a unique case and everyone wants JS, they say that they don't want fragmen…

Of all things that can be complained about, JS sandboxing is actually really hardened. I think the issue is the cross site wild west we have today. Cookies, requests etc go all over the place, when it should be isolated to same origin unless specific interactions are needed (and then they should probably be user facing and blockable). I think the real answer to why this hasn't been toothfully patched yet is ads and t…

> Of all things that can be complained about, JS sandboxing is actually really hardened.

It's still very useful for people who want to run arbitrary code on your CPU. Both AMD and Intel have severe flaws, called "speculative execution CPU bugs", that can be exploited to extract credentials, encryption keys, session keys etc. from your computer - even information living in other applications or [hardware layer] VM's.

Re: TikTok tracks you across the web, even if you don’t use the app

#160

Post by jgaa »

No, they don't track me across the web ;)

I have js disabled by default on my PC's and laptops. If I need (or want) to use a site that require js, I do so in a VM, and I use that VM only for one or a few related sites (like Hacker News and Slashdot). Each VM has different screen sizes and operating systems / Linux distributions. If I research a subject that is even slightly controversial, I use the Tor browser from a VM or Tails.

But mostly, I just ignore companies and organizations that don't know how to make a website work without js.

Post reply on HN