• 0 Posts
  • 388 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle


  • I’ve always liked the distinction between needing your job to survive and being okay if it disappeared for at least a few months

    If you have enough to mean you can take your time to look for a good job if you ever lost your current one without having to change your lifestyle, that’s the minimum bound of “enough” IMO. Anything else involves compromise, so therefore is not “enough” by definition.

    I’d say the idealised “enough” is when you can do whatever you decide to do without having to worry if you can afford it.

    Both of these depend on the kind of lifestyle people lead and how much more they would do if they didn’t have to think about money. For some people that idealised “enough” is unachievable, because they’ve decided what they want to do is make more money.

    People that end up chasing money for the sake of having more money will often do so in spite of any moral compass. And FWIW I don’t think there are a high percentage people out there that make “enough” by either of my definitions and that opens up all the exploitation that forces people into shitty jobs and situations they wouldn’t otherwise do













  • That’s literally the one main somewhat valid use case for plugins, and it’s basically because of DRM. A plugin that allows arbitrary code to run is a security nightmare, that’s why we don’t do it anymore.

    A lot of the security features you describe were added by browser vendors late in the game because of how much of a security nightmare flash was. I was building web software back when this was all happening, I know first hand. People actually got pissy when browsers blocked the ability for flash to run without consent and access things like the clipboard. I even seem to remember a hacky way of getting at the filesystem in flash via using the file upload mechanism, but I can’t remember the specifics as this was obviously getting close to two decades ago now.

    Your legitimate concerns about JavaScript are blockable by the browser.

    Flash was a big component of something called the evercookie—one of the things that led to stuff like GDPR because of how permanently trackable it made people. Modern JavaScript tracking is (quite rightfully) incredibly limited compared to what was possible with flash around. You could track users between browsers FFS.

    You’re starting to look like you don’t know what you’re talking about here.






  • Not a solution. Much of the modern web is reliant on JavaScript to function.

    Noscript made sense when the web was pages with superfluous scripts that enhanced what was already there.

    Much of the modern web is web apps that fundamentally break without JS. And picking and choosing unfortunately won’t generally protect from this because it’s common practice to use a bundler such as webpack to keep your page weight down. This will have been pulled in as a dependency in many projects and the site either works or does not based on the presence of the bundle.

    Not saying this is a great situation or anything, but suggesting noscript as a solution is increasingly anachronistic.