I love this in principle.
I just wish Mastodon instances were viewable without JavaScript. Opening the door to many types of browser exploit and fingerprinting shouldn't be required just for reading.
this post was submitted on 13 Oct 2024
998 points (98.3% liked)
Technology
59378 readers
3600 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Mastodon has RSS built-in. Just add ".rss" to the URL to get the RSS feed.
It also does have an API which can be used by apps, including alternate frontends which don't use JS.
I love the paranoia of you nerds. It's valid but idk how you spare the effort.
It's not paranoid to complain about the unnecessity of javascript when all you want to do is read a public text post on a social media platform. I have javascript disabled on some browsers, and it's annoying to have to whitelist a site that really shouldn't need it.
Isn't it basically a fundamental underlying technology of the web I don't understand how you can have it disabled and still be able to access modern websites.
it isn't. that is html and css, some would argue it's html only.
javascript is not needed to load a website. It's useful for interaction, and needed to load content separately and dynamically. without it you get a mostly (but not totally) static document like in Office Word
CSR exists. You know, WASM CSR websites rely on JS to manipulate the DOM.
that does not mean javascript is essential, and mox's point is still very valid.
using WASM instead of JS is not better either. you simply don't need any clientside executable code on a read-only view of a page
SSR then.
It's simple, when you understand how shaky the foundation of all digital infrastructure is it's impossible to not be paranoid.
The Polyfill incident is bad (that seems to be how the hackers got into the internet archive), and the OpenSSH one could have been really nasty, if it wasn't caught both early, and by chance (a performance engineer at a major software company noticed).
I'd say this comic is more relevant:
idk how you spare the effort.
When you've been building networked systems for longer than JavaScript has existed, it no longer takes effort to spot design choices that put users at risk. When you've watched endless vulnerabilities be exploited over the years, it's not paranoia, but a real-world problem that impacts real people. At that point, the flaws are impossible to responsibly ignore.
Spreading awareness and showing people how to build safer systems does sometimes get tiring, but I think it's important.
I actually gave up recently for my mental health of all things. Turns out accepting being tracked in just about everything I do but also getting all the benefits of living in the future, without the effort spent on mitigation, is a huge relief. Does Google know my daily routine? Yes. Did they when I had the tin foil hat on? Probably also yes.
I find the negatives detract from the benefits too much, usually. Like having your arm cut off and then receiving lovemaking: I am no longer in the mood.
Have you been watching Bad Monkey? Because that’s literally about half the plot.
Same it’s much nicer to enjoy the tech/tools. I still ad block on all devices tho
view more: next ›