[Trisquel-users] Browsing and javascript

2017-11-24 Thread stone
Hi, How dangerous is javascript when browsing? Does anyone in this forum browses the Internet with a javascript-disabled browser? Or maybe you just disable it when you are visiting a website you don't trust? What does the LibreJS add-on do? Does it make web browsing safer? Once I get some

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread shiretoko
Proprietary Javascript is a way smaller problem than normal proprietary software for two reasons: first, it is executed in your webbrowser, which puts it in a sandbox. That means that the webbrowser limits what javascript can actually do, and if your webbrowser is free software, everybody can

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread greatgnu
Judging exclusively from what I've read so far the situation is actually far worse than mate quantum describes. First of all, it appears that I would say 99% of tracking techniques rely heavily on javascript, and by heavily I mean they will not work if js is disabled. If EFF's study on finger

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread Caleb Herbert
> How dangerous is javascript when browsing? JavaScript is how a lot of people lose protection on Tor. Personally, JavaScript programs have put me in the following situations: * unable to highlight text in article with cursor * unable to copy text in article with Ctrl+C * pop-

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread Caleb Herbert
> first, it is executed in your webbrowser, which puts it in a sandbox. That > means that the webbrowser limits what javascript can actually do, and if your > > webbrowser is free software, everybody can check if it is really doing a > proper job. Security is not the same as user freedom.

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread masonhock
> They're actually probably the only way you > could legally distribute embedded JavaScript if it is under > the GNU > General Public License. Onpon4 makes some good points on this here: https://onpon4.github.io/other/kill-js/ > and it limits what > Facebook and other malicious sites can do w

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread Caleb Herbert
> > They're actually probably the only way you > > could legally distribute embedded JavaScript if it is under > the GNU > > General Public License. > > Onpon4 makes some good points on this here: > https://onpon4.github.io/other/kill-js/ I agree with much of her article, but I think LibreJ

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread shiretoko
"That's not source code." It's the code that gets executed in your browser, and again, for the average-joe website that just opens a dropdown menu or sends an ajax request to fetch, let's say, some posts from the database, this IS exactly what the author of the code wrote. I talked about ug

Re: [Trisquel-users] Browsing and javascript

2017-11-24 Thread Caleb Herbert
Hm, it seems we disagree on some basic points. My work is done.

Re: [Trisquel-users] Browsing and javascript

2017-11-25 Thread shiretoko
That's alright. Different viewpoints add to diversity.

Re: [Trisquel-users] Browsing and javascript

2017-11-30 Thread Adonay Felipe Nogueira
A minor correction also: The practice of distributing any JavaScript requires a license notice as described by the license text. For example, in the case of Modified BSD License (3-clause BSD), "MIT License" (Expat License or sometimes X11 License), the license text itself says one has to use the

Re: [Trisquel-users] Browsing and javascript

2017-11-30 Thread Caleb Herbert
What? LibreJS standards were DESIGNED to answer "What would true GPL compliance look like with JavaScript?"