Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>For me, if the site is broken and I'm interested in the content, I sometimes enable JavaScript temporarily without adding it to my whitelist. Deciding what to do when I encounter a broken site is the easy part.

But that basically negates all security benefits, because all it takes to get a 0day payload to run is to make the content sufficiently enticing and make javascript "required" for viewing the site. You might save some battery/data usage, but if you value your time at all I suspect any benefits is going to be eaten by you having to constantly whitelist sites.



I don't block javascript for security reasons, I block it for performance, privacy, and UX reasons. If there's a 0day that can be exploited by random javascript in the browser, UBlock won't save us.

> if you value your time at all I suspect any benefits is going to be eaten by you having to constantly whitelist sites.

I don't constantly whitelist sites, only the ones I use regularly (like my email provider). Temporarily enabling JS on a broken site doesn't add it to my whitelist and only takes three clicks (which is muscle memory at this point):

1. Click to open UBlock window 2. Click to allow javascript temporarily 3. Click to refresh the page




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: