Updates tagged with javascript on Jonkman Microblog!
lnxw48a1: I've been looking a little at websites that don't try to be applications because most of my devices are too memory-constrained to run multiple tabs of #JavaScript. Yesterday's discovery: https://sqwok.im/
lnxw48a1's status on Friday, 17-Nov-2023 14:22:01 EST
I've been looking a little at websites that don't try to be applications because most of my devices are too memory-constrained to run multiple tabs of #JavaScript. Yesterday's discovery: https://sqwok.im/
lnxw48a1: These days, when I see "Bootstrap", I think of the #JavaScript and #CSS framework created by #Twitter. I usually refer to #bootstrap as "buttslap".
lnxw48a1's status on Thursday, 05-Oct-2023 14:20:15 EDT
These days, when I see "Bootstrap", I think of the #JavaScript and #CSS framework created by #Twitter. I usually refer to #bootstrap as "buttslap".
lnxw48a1: #T-Mobile Home Internet dropped to dial up speed this evening. 50kbps down. Up is better, 2.5Mbps. It still means very few of today's bloated, #JavaScript heavy sites will load, even if the actual content is a few thousand characters.
lnxw48a1's status on Friday, 22-Sep-2023 21:59:58 EDT
#T-Mobile Home Internet dropped to dial up speed this evening. 50kbps down. Up is better, 2.5Mbps. It still means very few of today's bloated, #JavaScript heavy sites will load, even if the actual content is a few thousand characters.
lnxw48a1: A security researcher questions whether standard phishing awareness training is even worth continuing. https://malwaretech.com/2023/09/it-might-be-time-to-rethink-phishing-awareness.html [malwaretech com] If you browse with #JavaScript disabled, you'll want to CTRL-U to view source. The article starts at line 377 and ends at line 426 (out of 798). It should make one wonder what evil intentions are behind hiding the text unless #JabbaShit is enabled. This is true on any site, but a domain like "Malware Tech" should pay special attention to this idea. It's probably a decent site with no ill intentions, but what they're doing is shady and questionable at best.
lnxw48a1's status on Wednesday, 20-Sep-2023 17:34:11 EDT
A security researcher questions whether standard phishing awareness training is even worth continuing. https://malwaretech.com/2023/09/it-might-be-time-to-rethink-phishing-awareness.html [malwaretech com] If you browse with #JavaScript disabled, you'll want to CTRL-U to view source. The article starts at line 377 and ends at line 426 (out of 798). It should make one wonder what evil intentions are behind hiding the text unless #JabbaShit is enabled. This is true on any site, but a domain like "Malware Tech" should pay special attention to this idea. It's probably a decent site with no ill intentions, but what they're doing is shady and questionable at best.
It might Be Time to Rethink Phishing Awareness – MalwareTech
lnxw48a1: Yax filing site #efile.com was serving #malware #JavaScript and #PHP files in early April. No information on how the attackers gained access. https://nu.federati.net/url/290472 [www bleepingcomputer com]
lnxw48a1's status on Saturday, 20-May-2023 12:03:22 EDT
Yax filing site #efile.com was serving #malware #JavaScript and #PHP files in early April. No information on how the attackers gained access. https://nu.federati.net/url/290472 [www bleepingcomputer com]
IRS-authorized eFile.com tax return software caught serving JS malware
lnxw48a1: While I was on the #TrueNAS site, I decided to visit https://truenas.com/careers/ page, but it is #JavaScrippled #JavaScript_Dependent and I wasn't interested enough to turn #JavaScript on for them.
lnxw48a1's status on Friday, 03-Mar-2023 22:43:33 EST
While I was on the #TrueNAS site, I decided to visit https://truenas.com/careers/ page, but it is #JavaScrippled #JavaScript_Dependent and I wasn't interested enough to turn #JavaScript on for them.
Careers with TrueNAS | Join the Open Storage Revolution
lnxw48a1: https://sixcolors.com/link/2023/01/the-end-of-the-twitter-client-era/ [sixcolors com] I remember using 3rd party clients to access #Twitter. There was the commandline #TTYtter, the #Flock browser's built-in social client, and many others. As Twitter added ads andspewed tons of #JavaScript, leading to a "jumping and twitching" interface that would move underneath your mouse pointer and cause mis-clicks, and as it took 5-10 minutes after logging in for the page to fully load, it was clients that made the site tolerable. There was the "OAuth-pocalypse", when they required all clients to use OAuth (v2?) and it intermittently failed for a few weeks. Then came the day when clients and other API uses "that substantially reproduce" the Twitter UI were notified that their days were numbered. I remember @evan telling them that Identica and other StatusNet instances had a similar API ... but few, if any, clients came over. Most just shut down. Hilariously, there was a trivially reproducible social ranking thing that was cited as an example of the kind of API uses Twitter considered interesting and allowable. There were other, lesser bumps in the road, but as Twitter had already strangled most of its client ecosystem, I did not pay attention.
lnxw48a1's status on Monday, 16-Jan-2023 17:32:12 EST
https://sixcolors.com/link/2023/01/the-end-of-the-twitter-client-era/ [sixcolors com] I remember using 3rd party clients to access #Twitter. There was the commandline #TTYtter, the #Flock browser's built-in social client, and many others. As Twitter added ads andspewed tons of #JavaScript, leading to a "jumping and twitching" interface that would move underneath your mouse pointer and cause mis-clicks, and as it took 5-10 minutes after logging in for the page to fully load, it was clients that made the site tolerable. There was the "OAuth-pocalypse", when they required all clients to use OAuth (v2?) and it intermittently failed for a few weeks. Then came the day when clients and other API uses "that substantially reproduce" the Twitter UI were notified that their days were numbered. I remember @evan telling them that Identica and other StatusNet instances had a similar API ... but few, if any, clients came over. Most just shut down. Hilariously, there was a trivially reproducible social ranking thing that was cited as an example of the kind of API uses Twitter considered interesting and allowable. There were other, lesser bumps in the road, but as Twitter had already strangled most of its client ecosystem, I did not pay attention.
lnxw48a1: @fu I have definitely noticed that when I use the phone's hotspot, the Friendica UI on Libranet doesn't work correctly and takes forever to load anything. I would say the real issues are (1) too much #JavaScript instead of native HTML + CSS (2) infinite scroll instead of pagination. The combination makes every page load into a [b]REALLY[/b] big download.
lnxw48a1's status on Sunday, 25-Dec-2022 13:55:31 EST
@fu I have definitely noticed that when I use the phone's hotspot, the Friendica UI on Libranet doesn't work correctly and takes forever to load anything. I would say the real issues are (1) too much #JavaScript instead of native HTML + CSS (2) infinite scroll instead of pagination. The combination makes every page load into a [b]REALLY[/b] big download.
lnxw48a1: Doing #JavaScript when you're tired is like trying to do an incantation in a foreign language, where if you pronounce it wrong, you call up a cannibal to eat you. (This was from an earlier conversation. I'm not messing with JS right now.)
lnxw48a1's status on Saturday, 24-Dec-2022 12:53:30 EST
Doing #JavaScript when you're tired is like trying to do an incantation in a foreign language, where if you pronounce it wrong, you call up a cannibal to eat you. (This was from an earlier conversation. I'm not messing with JS right now.)
lnxw48a1: Tagging this thread with #Fediverse #Security ... whomever made the script obviously read some protocol docs and some source code. With just a little #JavaScript, they were able to knock some #Misskey and #Mastodon instances to their knees. This isn't the first, and it won't be the last. Remember when someone posted a humongous image and locked up any #GNUSocial instance that tried to download the image? Remember when someone's instance was replaced by some sort of cryptocurrency site and PuSH es from your site to theirs would crash your site because of their site's response? (I'll bet I still have that domain blocked at the firewall.) We have to stop being naive about the intentions of those in the current migration. The overwhelming majority will have benign, if not good, intentions. But a select few will have bad intentions. Among those intentions is to colonize the Fediverse with #Twitter's culture, to come here and impose that culture of anger and disrespect upon the inhabitants here ... which already happened once with the first wave of people joining #Mastodon instance, except it was Twitter and #Tumblr at that time.
lnxw48a1's status on Sunday, 04-Dec-2022 11:22:39 EST
Tagging this thread with #Fediverse #Security ... whomever made the script obviously read some protocol docs and some source code. With just a little #JavaScript, they were able to knock some #Misskey and #Mastodon instances to their knees. This isn't the first, and it won't be the last. Remember when someone posted a humongous image and locked up any #GNUSocial instance that tried to download the image? Remember when someone's instance was replaced by some sort of cryptocurrency site and PuSH es from your site to theirs would crash your site because of their site's response? (I'll bet I still have that domain blocked at the firewall.) We have to stop being naive about the intentions of those in the current migration. The overwhelming majority will have benign, if not good, intentions. But a select few will have bad intentions. Among those intentions is to colonize the Fediverse with #Twitter's culture, to come here and impose that culture of anger and disrespect upon the inhabitants here ... which already happened once with the first wave of people joining #Mastodon instance, except it was Twitter and #Tumblr at that time.
lnxw48a1: Back in the 1990s, my youngest uncle kept telling me to learn #COBOL instead of #Java (though at the time, I was taking courses with Microsoft #BASIC ... and later took both COBOL and Java, along with #Pascal, #Visual_Basic, #JavaScript, #Perl, #PHP, and more). At the time, he was making $100,000+ and taking time off whenever he wanted. I think he made a lot more during the fixes that prevented #Y2K from becoming the expected meltdown, but he then ran into headwinds because foreign programmers were being imported to do the work for a lot less than what he was accustomed to earning, so he retired. I thought about this back when the lockdowns geared up and state governors were crying about lacking the COBOL programmers to fix their unemployment insurance systems.
lnxw48a1's status on Saturday, 30-Jul-2022 12:55:44 EDT
Back in the 1990s, my youngest uncle kept telling me to learn #COBOL instead of #Java (though at the time, I was taking courses with Microsoft #BASIC ... and later took both COBOL and Java, along with #Pascal, #Visual_Basic, #JavaScript, #Perl, #PHP, and more). At the time, he was making $100,000+ and taking time off whenever he wanted. I think he made a lot more during the fixes that prevented #Y2K from becoming the expected meltdown, but he then ran into headwinds because foreign programmers were being imported to do the work for a lot less than what he was accustomed to earning, so he retired. I thought about this back when the lockdowns geared up and state governors were crying about lacking the COBOL programmers to fix their unemployment insurance systems.
lnxw48a1: I bought tickets to a !baseball game. The process is unpleasant. If I wasn't already committed to go, I would not have gone through it. 1. Visit MLB.com on the (older) tablet and click on the team, then on tickets. 2. Oops! Their 3rd party processor does not like your #VPN. You're going to have to enter sensitive financial data across #hotel_Wi-Fi. I know that we're using HTTPS, so there's already encryption from me to mpv\.tickets\.com. Okay, I'll risk it. 3. Okay, pick a game that you want to buy tickets for. Wait up to 4 minutes for the #JavaScript to load and the page to stop jumping around. Now slide the price slider, so you can look at tickets at prices you are willing to pay. Wait for the JS again. 4. Now you're supposed to choose your seat by which section it is in, so you try to expand the map to see where each section is. The map seems unresponsive, but after 3-4 minutes, it will suddenly start moving. Okay click the back button and do it again. 5. Click 'buy now'. Wait 3-4 minutes and the 'create an mlb.com account' page opens. Account creation is followed by adding a credit card (or Google Pay) to your account. 6. You only had 9 minutes to complete the purchase before the tickets go back in the pool. Let's use the laptop instead. And the hotel log in page takes almost 15 minutes to go through tonight. (Once you get in, you've got 10Mbps up and the same amount down.) 7. Log in to mlb\.com, go back to the ticket buying site. This time, you're able to complete the purchase in a few minutes. Thanks to excessive #JabbaShit, the page is still twitchy. But you got it done anyway. 8. When you get to the field, you'll need to use the MLB app on your phone in order to present a bar code for entry. No Google account? You can't install the app.
lnxw48a1's status on Monday, 23-May-2022 22:10:34 EDT
I bought tickets to a !baseball game. The process is unpleasant. If I wasn't already committed to go, I would not have gone through it. 1. Visit MLB.com on the (older) tablet and click on the team, then on tickets. 2. Oops! Their 3rd party processor does not like your #VPN. You're going to have to enter sensitive financial data across #hotel_Wi-Fi. I know that we're using HTTPS, so there's already encryption from me to mpv\.tickets\.com. Okay, I'll risk it. 3. Okay, pick a game that you want to buy tickets for. Wait up to 4 minutes for the #JavaScript to load and the page to stop jumping around. Now slide the price slider, so you can look at tickets at prices you are willing to pay. Wait for the JS again. 4. Now you're supposed to choose your seat by which section it is in, so you try to expand the map to see where each section is. The map seems unresponsive, but after 3-4 minutes, it will suddenly start moving. Okay click the back button and do it again. 5. Click 'buy now'. Wait 3-4 minutes and the 'create an mlb.com account' page opens. Account creation is followed by adding a credit card (or Google Pay) to your account. 6. You only had 9 minutes to complete the purchase before the tickets go back in the pool. Let's use the laptop instead. And the hotel log in page takes almost 15 minutes to go through tonight. (Once you get in, you've got 10Mbps up and the same amount down.) 7. Log in to mlb\.com, go back to the ticket buying site. This time, you're able to complete the purchase in a few minutes. Thanks to excessive #JabbaShit, the page is still twitchy. But you got it done anyway. 8. When you get to the field, you'll need to use the MLB app on your phone in order to present a bar code for entry. No Google account? You can't install the app.
rozzin: This may just be the best-written article ever: "In Defence of the Single Page Application" #javascript #webdesign !hack
rozzin's status on Sunday, 22-May-2022 17:17:39 EDT
This may just be the best-written article ever: "In Defence of the Single Page Application" #javascript #webdesign !hack
lnxw48a1: I used to use a certain newspaper's site to do pay searches. If you worked for the US government, that site had your official pay scale (lagging about 18 months). Despite $EMPLOYER's effort to keep us from knowing who makes how much, I knew. That info is now behind a paywall (and not a standard JS-based paywall that can be evaded by turning off #JavaScript).
lnxw48a1's status on Friday, 20-May-2022 17:21:04 EDT
I used to use a certain newspaper's site to do pay searches. If you worked for the US government, that site had your official pay scale (lagging about 18 months). Despite $EMPLOYER's effort to keep us from knowing who makes how much, I knew. That info is now behind a paywall (and not a standard JS-based paywall that can be evaded by turning off #JavaScript).
lnxw48a1: Case in point, in any of the #Chromium based browsers, you can turn #JavaScript totally on or totally off. There is no option to turn it off for 3rd party domains. So many sites are #JavaScrippled these days that turning JS all the way off (without a one-click way to turn it on for one site) is too frustrating for anyone to do. I did see in #Edge today that I can add sites individually to either a separate Yes to JS or No to JS list. I don't recall seeing it until recently. But that's cumbersome.
lnxw48a1's status on Wednesday, 16-Feb-2022 20:09:25 EST
Case in point, in any of the #Chromium based browsers, you can turn #JavaScript totally on or totally off. There is no option to turn it off for 3rd party domains. So many sites are #JavaScrippled these days that turning JS all the way off (without a one-click way to turn it on for one site) is too frustrating for anyone to do. I did see in #Edge today that I can add sites individually to either a separate Yes to JS or No to JS list. I don't recall seeing it until recently. But that's cumbersome.
lnxw48a1: Apparently, Linus Sebastian (of "Linus Tech Tips") said that ad-blocking is basically piracy. But given the intrusive, invasive, interruptive nature of many ads and the extreme data-collection that accompanies them, ad-blocking is the only sensible and sane choice. It is okay to choose a small number of trusted sites and unblock for them--if you choose to do so--but in general, ads should be blocked. The #JavaScript used to serve ads has been hijacked on occasion to install malware, in addition to its role in the data collection and spying that advertising networks do. But as for the moral argument he's reaching for: * the site is paid by the ad vendor * the ad vendor is paid by the advertiser * therefore, the site visitor has no obligation to allow or view ads on the site. If that affects the site's revenue so deeply that it is no longer worthwhile to run the site & produce the content that the site displays, then someone should be looking at alternate revenue sources (e.g., offer t-shirts and mugs with the site's name and logo * the site visitor and site owner / administrator have no agreement express or implied which requires the allowance and viewing of advertisements
lnxw48a1's status on Tuesday, 01-Feb-2022 23:39:01 EST
Apparently, Linus Sebastian (of "Linus Tech Tips") said that ad-blocking is basically piracy. But given the intrusive, invasive, interruptive nature of many ads and the extreme data-collection that accompanies them, ad-blocking is the only sensible and sane choice. It is okay to choose a small number of trusted sites and unblock for them--if you choose to do so--but in general, ads should be blocked. The #JavaScript used to serve ads has been hijacked on occasion to install malware, in addition to its role in the data collection and spying that advertising networks do. But as for the moral argument he's reaching for: * the site is paid by the ad vendor * the ad vendor is paid by the advertiser * therefore, the site visitor has no obligation to allow or view ads on the site. If that affects the site's revenue so deeply that it is no longer worthwhile to run the site & produce the content that the site displays, then someone should be looking at alternate revenue sources (e.g., offer t-shirts and mugs with the site's name and logo * the site visitor and site owner / administrator have no agreement express or implied which requires the allowance and viewing of advertisements
lnxw48a1: There’s no question that PoW mining uses a lot of power. But so does Facebook and so does gratuitous #JavaScript on web pages. No one is suggesting that we forbid or boycott Facebook or JavaScrippled web pages over their expected climate impacts.
lnxw48a1's status on Monday, 24-Jan-2022 17:53:00 EST
There’s no question that PoW mining uses a lot of power. But so does Facebook and so does gratuitous #JavaScript on web pages. No one is suggesting that we forbid or boycott Facebook or JavaScrippled web pages over their expected climate impacts.
lnxw48a1: https://www.radioshack.com/ Link seen because @moon@shitposter.club repeated someone's post. I refused to turn on #JavaScript, so I can't see most of the content, but I think this is a really bad idea. I'm not anti-cryptocurrency (as I think of it as one possible way to prevent bankers' tyranny over us), but whatever one thinks about RadioShack / Radio Shack, I don't think attaching a different product or service to the name makes any sense. Too many people still remember going into thir stores and buying computers and somewhat outdated stereo systems, so the new owner's product or service _is_ going to clash in their minds.
lnxw48a1's status on Tuesday, 21-Dec-2021 12:26:12 EST
https://www.radioshack.com/ Link seen because @moon@shitposter.club repeated someone's post. I refused to turn on #JavaScript, so I can't see most of the content, but I think this is a really bad idea. I'm not anti-cryptocurrency (as I think of it as one possible way to prevent bankers' tyranny over us), but whatever one thinks about RadioShack / Radio Shack, I don't think attaching a different product or service to the name makes any sense. Too many people still remember going into thir stores and buying computers and somewhat outdated stereo systems, so the new owner's product or service _is_ going to clash in their minds.
lnxw48a1: after a nuclear war, the remaining people will probably not be able to spin up a modern operating system on their improvised chips. How do you build a simple, reliable, legacy-free OS from scratch? What ideas 💡 and techniques should be passed down to those people? If we think hard enough about this, I think we’ll agree that closed-source systems are basically designed to be almost impossible for people outside the sponsoring organization to reproduce (for an example, consider [ReactOS](https://reactos.org/), which launched as [a project to produce a system compatible with Windows 95](https://reactos.org/wiki/FreeWin95) and [then changed to focus on Windows NT](https://reactos.org/wiki/ReactOS/History), and after more than 25 years, is still not capable of being a daily use system. But we may also determine that most open-source systems are likewise not designed in such a way that reconstruction is viable. The Linux kernel is *huge* these days. Additionally, in my opinion, they’d probably want to use programming languages designed for readability, ease of learning, and error-reduction first (that is, more like #COBOL than #C, more like #Java than #CPlusPlus, more like !Smalltalk and #Lisp / #Scheme than #Perl / #Raku and #JavaScript) and then performance and low-level access. I think it is a mistake to assume that one could start with a modern version of #gcc or #llvm or #msvc … because it is not a given that the software itself and someone who knew how to use it (and update, modify, and adapt it) would still exist.
lnxw48a1's status on Sunday, 05-Dec-2021 15:16:02 EST
after a nuclear war, the remaining people will probably not be able to spin up a modern operating system on their improvised chips. How do you build a simple, reliable, legacy-free OS from scratch? What ideas 💡 and techniques should be passed down to those people? If we think hard enough about this, I think we’ll agree that closed-source systems are basically designed to be almost impossible for people outside the sponsoring organization to reproduce (for an example, consider [ReactOS](https://reactos.org/), which launched as [a project to produce a system compatible with Windows 95](https://reactos.org/wiki/FreeWin95) and [then changed to focus on Windows NT](https://reactos.org/wiki/ReactOS/History), and after more than 25 years, is still not capable of being a daily use system. But we may also determine that most open-source systems are likewise not designed in such a way that reconstruction is viable. The Linux kernel is *huge* these days. Additionally, in my opinion, they’d probably want to use programming languages designed for readability, ease of learning, and error-reduction first (that is, more like #COBOL than #C, more like #Java than #CPlusPlus, more like !Smalltalk and #Lisp / #Scheme than #Perl / #Raku and #JavaScript) and then performance and low-level access. I think it is a mistake to assume that one could start with a modern version of #gcc or #llvm or #msvc … because it is not a given that the software itself and someone who knew how to use it (and update, modify, and adapt it) would still exist.
lnxw48a1: https://thehackernews.com/2021/09/protonmail-shares-activists-ip-address.html I did not anticipate this, because I figured they’d have learned from Lavabit and designed their systems such that there was no way for them to have any metadata (user’s IP address, user’s ‘user agent’, timestamps of users’ correspondence, pretty much everything except what is required to send and receive messages). Any information your system has, however briefly, can be the subject of a government order. My issue over the years has been that both Protonmail and Tutunota send you the JavaScript used to “end-to-end encrypt” your message. At any time, they could be ordered to modify that JS to cache the encryption keys for later reuse by government agencies. Tags: #Protonmail, #surveillance, #government_over_reach, #metadata, #encryption, #JavaScript
lnxw48a1's status on Monday, 06-Sep-2021 20:28:49 EDT
https://thehackernews.com/2021/09/protonmail-shares-activists-ip-address.html I did not anticipate this, because I figured they’d have learned from Lavabit and designed their systems such that there was no way for them to have any metadata (user’s IP address, user’s ‘user agent’, timestamps of users’ correspondence, pretty much everything except what is required to send and receive messages). Any information your system has, however briefly, can be the subject of a government order. My issue over the years has been that both Protonmail and Tutunota send you the JavaScript used to “end-to-end encrypt” your message. At any time, they could be ordered to modify that JS to cache the encryption keys for later reuse by government agencies. Tags: #Protonmail, #surveillance, #government_over_reach, #metadata, #encryption, #JavaScript
ProtonMail Shares Activist's IP Address With Authorities Despite Its "No Log" Claims
lnxw48a1: He did, but he kept control of them, so when his funds ran short, most of them disappeared. I've thought about deploying a Federati #Pump.io instance, but it runs atop #Node.js. I'd want to rent a completely separate server ( #VPS ) for it, so nothing else is affected if a poorly understood #JavaScript engine goes haywire.
lnxw48a1's status on Tuesday, 24-Aug-2021 22:55:57 EDT
He did, but he kept control of them, so when his funds ran short, most of them disappeared. I've thought about deploying a Federati #Pump.io instance, but it runs atop #Node.js. I'd want to rent a completely separate server ( #VPS ) for it, so nothing else is affected if a poorly understood #JavaScript engine goes haywire.
lnxw48a1: It looks like it has been some months since I looked at #jsish. As #JavaScript interpreter projects go, it looks relatively good.
lnxw48a1's status on Tuesday, 10-Aug-2021 00:31:39 EDT
It looks like it has been some months since I looked at #jsish. As #JavaScript interpreter projects go, it looks relatively good.
lnxw48a1: Playing with "jsish":{https://jsish.org/} a little bit. If I get very far, I'll probably try to create a minimal project to demonstrate its use. #JSISH is a #JavaScript like interpreter + websocket server + sqlite + C extension interface
lnxw48a1's status on Monday, 09-Aug-2021 23:54:13 EDT
Playing with "jsish":{https://jsish.org/} a little bit. If I get very far, I'll probably try to create a minimal project to demonstrate its use. #JSISH is a #JavaScript like interpreter + websocket server + sqlite + C extension interface
lnxw48a1: It took forever for YouTube's ton* of #JavaScript to load, but yeah, that does look like fun. * Even after the video starts playing, the controls don't work until the last piece of #JabbaShit loads. Not even the "don't autoplay the next video" button. The actual video was already over by that time. WTH YouTube?
lnxw48a1's status on Friday, 30-Jul-2021 21:21:49 EDT
It took forever for YouTube's ton* of #JavaScript to load, but yeah, that does look like fun. * Even after the video starts playing, the controls don't work until the last piece of #JabbaShit loads. Not even the "don't autoplay the next video" button. The actual video was already over by that time. WTH YouTube?
lnxw48a1: Wow. There looked to be about twenty different sites pushing #JavaScript on that job application site. Even after I allowed all (except CloudFlare Insights and Google Analytics), the submit button wouldn't work. There was a defective Date object somewhere that threw the 'then' clause of an if statement into a tizzy. Switched browsers and it went right through. Same set of extensions, I think. Both browsers have built in ad-blocking, so I'm going to guess that some difference in their ad filters caused the different behavior.
lnxw48a1's status on Saturday, 24-Jul-2021 03:37:36 EDT
Wow. There looked to be about twenty different sites pushing #JavaScript on that job application site. Even after I allowed all (except CloudFlare Insights and Google Analytics), the submit button wouldn't work. There was a defective Date object somewhere that threw the 'then' clause of an if statement into a tizzy. Switched browsers and it went right through. Same set of extensions, I think. Both browsers have built in ad-blocking, so I'm going to guess that some difference in their ad filters caused the different behavior.
lnxw48a1: #Manyverse ( mobile #SSB client ) is having another one of its “can’t connect to a pub server, so you’re basically operating standalone” periods. It seems the last successful connection was two weeks ago. I know one of Secure ScuttleButt’s features is not needing Internet at all, but if you’re not connecting via LAN occasionally, you need a way for #peer-to-peer software to bootstrap a pool of connections into the network overlay over the Internet. I think pubs (and the new implementation that is just getting started) are a sign that a P2P project is not designed for real life usage. I realize that many “Butts”, including the developers, are leftish anarchists, so when things work, they are able to discuss the dream world they hope to implement. But the majority of people are not breathing such rarified air, and #Secure_ScuttleButt needs to just work for regular people also. Probably needs some concepts from Jami … and to be implementable without using Node.js … which I’ve seen people saying is not currently possible. An aside: I do wonder whether it depends on peculiarities of #JavaScript or of #Node.JS itself. If the first is true, one may be able to implement SSB with #Deno or #JSI / #JSISH.
lnxw48a1's status on Sunday, 18-Jul-2021 23:57:06 EDT
#Manyverse ( mobile #SSB client ) is having another one of its “can’t connect to a pub server, so you’re basically operating standalone” periods. It seems the last successful connection was two weeks ago. I know one of Secure ScuttleButt’s features is not needing Internet at all, but if you’re not connecting via LAN occasionally, you need a way for #peer-to-peer software to bootstrap a pool of connections into the network overlay over the Internet. I think pubs (and the new implementation that is just getting started) are a sign that a P2P project is not designed for real life usage. I realize that many “Butts”, including the developers, are leftish anarchists, so when things work, they are able to discuss the dream world they hope to implement. But the majority of people are not breathing such rarified air, and #Secure_ScuttleButt needs to just work for regular people also. Probably needs some concepts from Jami … and to be implementable without using Node.js … which I’ve seen people saying is not currently possible. An aside: I do wonder whether it depends on peculiarities of #JavaScript or of #Node.JS itself. If the first is true, one may be able to implement SSB with #Deno or #JSI / #JSISH.
lnxw48a1: @lxo RE: https://gnusocial.net/notice/9688345 When I saw Aral's post, I thought he couldn't mean what he said in https://mastodon.ar.al/@aral/106532380339054212 ... surely he knows that generally, #JavaScript is hosted (and thus controlled) from the server, but runs on the local client. And therefore is only as trustworthy as the server's owner/operator. A high JS front-end requires a high-spec client machine (see all the people complaining about PleromaFE's slowness and browser crashes) and as soon as the organization hosting the JS determines that their interests require data centralization, that scripting can send it all back to the server without the user ever knowing anything changed.
lnxw48a1's status on Tuesday, 06-Jul-2021 14:59:58 EDT
@lxo RE: https://gnusocial.net/notice/9688345 When I saw Aral's post, I thought he couldn't mean what he said in https://mastodon.ar.al/@aral/106532380339054212 ... surely he knows that generally, #JavaScript is hosted (and thus controlled) from the server, but runs on the local client. And therefore is only as trustworthy as the server's owner/operator. A high JS front-end requires a high-spec client machine (see all the people complaining about PleromaFE's slowness and browser crashes) and as soon as the organization hosting the JS determines that their interests require data centralization, that scripting can send it all back to the server without the user ever knowing anything changed.
mensaje de Alexandre Oliva (lxo@gnusocial.net), el Tuesday, 06-Jul-2021 09:54:17 CEST
lnxw48a1: https://github.com/ekzhang/rustpad Cooperative online text / document editor. Looked interesting until I saw that it requires #Node.JS. I'm also still a little leery of letting WASM run in my browsers. Not that people can read obfuscated minified #JavaScript, but if you could obtain the pre-minified source, you might be able to tell what it was doing. With WASM, you're totally just letting unauditable and untrusted code run in your browser. (I know this has a "Get off my lawn" flavor, but that's not what is happening here. Just wait until a GRU-sponsored malware gang starts inserting malicious WASM into popular sites around the Web.)
lnxw48a1's status on Monday, 07-Jun-2021 19:13:08 EDT
https://github.com/ekzhang/rustpad Cooperative online text / document editor. Looked interesting until I saw that it requires #Node.JS. I'm also still a little leery of letting WASM run in my browsers. Not that people can read obfuscated minified #JavaScript, but if you could obtain the pre-minified source, you might be able to tell what it was doing. With WASM, you're totally just letting unauditable and untrusted code run in your browser. (I know this has a "Get off my lawn" flavor, but that's not what is happening here. Just wait until a GRU-sponsored malware gang starts inserting malicious WASM into popular sites around the Web.)
lnxw48a1: Time to switch back to #Palemoon. I've been using #Falkon as my main browser for a few days. Plus: Unlike Palemoon, when Falkon decides to have an issue, one or more tabs fail to load, but the browser itself doesn't crash. Minus: It really needs something like NoScript, where all #JavaScript is off, except for specific sites you authorize; it cannot load PleromaFE and cannot log in with Soapbox. I should have tried Bloat, but I didn't. Although I don't knowingly have any Snaps installed, snapd randomly spins all CPU cores at 100% for a few minutes ... this was never observed with Palemoon.
lnxw48a1's status on Thursday, 03-Jun-2021 21:08:48 EDT
Time to switch back to #Palemoon. I've been using #Falkon as my main browser for a few days. Plus: Unlike Palemoon, when Falkon decides to have an issue, one or more tabs fail to load, but the browser itself doesn't crash. Minus: It really needs something like NoScript, where all #JavaScript is off, except for specific sites you authorize; it cannot load PleromaFE and cannot log in with Soapbox. I should have tried Bloat, but I didn't. Although I don't knowingly have any Snaps installed, snapd randomly spins all CPU cores at 100% for a few minutes ... this was never observed with Palemoon.
drak: Do no eval! Mind the truthers! — minimal safety measures for #Javascript. What’s your war story? #donoeval #mindthetruthers
drak's status on Monday, 17-May-2021 10:05:51 EDT
Do no eval! Mind the truthers! — minimal safety measures for #Javascript. What’s your war story? #donoeval #mindthetruthers
lnxw48a1: https://nu.federati.net/url/280765 [www latimes com] (NOTE: The "turn off your adblocker or pay money" depends on #JavaScript. If you turn #JabbaShit off, you can read the article.)
lnxw48a1's status on Wednesday, 21-Apr-2021 02:28:58 EDT
https://nu.federati.net/url/280765 [www latimes com] (NOTE: The "turn off your adblocker or pay money" depends on #JavaScript. If you turn #JabbaShit off, you can read the article.)
At flashpoint of George Floyd protests, Fairfax Avenue reacts to verdict with relief
lnxw48a1: @storm #Pleroma comes with PleromaFE and MastoFE. I know PleromaFE is high in #JavaScript. If the #JabbaShit interferes with your assistive technologies, there is a separate front end called “Bloat”, which is supposed to be much less JavaScript-y. I have not seen Bloat myself (I don’t even know the project’s URL), so this is all hearsay.
lnxw48a1's status on Wednesday, 07-Apr-2021 00:29:44 EDT
@storm #Pleroma comes with PleromaFE and MastoFE. I know PleromaFE is high in #JavaScript. If the #JabbaShit interferes with your assistive technologies, there is a separate front end called “Bloat”, which is supposed to be much less JavaScript-y. I have not seen Bloat myself (I don’t even know the project’s URL), so this is all hearsay.
musicman: One of two positions coming out on my team. These two positions are a little different than those on my team currently, but I should still be able to answer questions about it. My team is 100% remote, and was pre-pandemic, but there are office locations available if you prefer an office. Role: JavaScript Solutions Architect ( #AngularJS) Location: Minneapolis, MN, Burlington, MA, Louisville, CO, Alameda, CA or Remote for the Candidate Position Summary: Perforce is seeking an Open Source Software Support Engineer (with deep AngularJS experience) to join our OpenLogic team, responsible for providing support and services on Open Source technologies to our OpenLogic customers. This critical position demands a software engineer with a strong programming skills and some networking capabilities. You would be responsible for ensuring the success of our customers by effectively providing dependable and timely resolutions related to open source software. The ideal candidate is expected to be self-motivated, proactive, results-oriented and able to provide a high level of customer satisfaction through the delivery of world-class technical support service Responsibilities: Interact with end users on technical problems Tier 4 support for open source JavaScript products and tangential technologies Drive resolution of those problems, which include: Open source software issues Questions around open source software usage Questions around use and best practices Review of the architecture and design where software is implemented Conduct professional services and training engagements Research, understand, and advocate open source software Interact with various open source communities Drive early resolution of issues Present knowledge via articles, blogs, and conference presentations Requirements: Minimum of 10 years of software development and design, systems administration, or level 3-4 technical support experience Minimum 5 years development, design, implementation, and troubleshooting experience on AngularJS At least 2 years in a senior position ( senior/lead developer, engineer, or software architect) Experience resolving remotely exploitable CVEs & cross-site scripting vulnerabilities 10+ years of hands on experience working w/ JavaScript technologies: Highly-skilled JavaScript developer with extensive knowledge of theoretical Angular software engineering Strong expertise w/ HTML, CSS, & writing cross-browser compatible code Understanding of AJAX and #JavaScript DOM manipulation Techniques Experience w/ RESTful services Experience in JavaScript build tools like #Gulp or #Grunt Familiar with JavaScript testing frameworks Virtualization and cloud experience with qemu/kvm, #Azure, #AWS, VirtualBox, #Vagrant Experience working in production environments, especially enterprise/carrier environments Technical knowledge, skills & expertise in complex infrastructure, web-based software and enterprise software Preference given to candidates with implementation and troubleshooting experience on one or more of the following: #Node.js, #npm, #React, #Redux, Vue.js, Aurelia, Apache Cassandra, Jenkins CI, #DockerCE, #ElasticSearch, #Kubernetes, or #MongoDB Experience migrating AngularJS to Angular Experience transitioning AngularJS to other modern JavaScript solutions Committer status on AngularJS product Configured, installed, & maintained JavaScript applications at scale in a production environment Experience tuning JavaScript for reliability & speed https://nu.federati.net/url/280588
musicman's status on Tuesday, 06-Apr-2021 09:58:40 EDT
One of two positions coming out on my team. These two positions are a little different than those on my team currently, but I should still be able to answer questions about it. My team is 100% remote, and was pre-pandemic, but there are office locations available if you prefer an office. Role: JavaScript Solutions Architect ( #AngularJS) Location: Minneapolis, MN, Burlington, MA, Louisville, CO, Alameda, CA or Remote for the Candidate Position Summary: Perforce is seeking an Open Source Software Support Engineer (with deep AngularJS experience) to join our OpenLogic team, responsible for providing support and services on Open Source technologies to our OpenLogic customers. This critical position demands a software engineer with a strong programming skills and some networking capabilities. You would be responsible for ensuring the success of our customers by effectively providing dependable and timely resolutions related to open source software. The ideal candidate is expected to be self-motivated, proactive, results-oriented and able to provide a high level of customer satisfaction through the delivery of world-class technical support service Responsibilities: Interact with end users on technical problems Tier 4 support for open source JavaScript products and tangential technologies Drive resolution of those problems, which include: Open source software issues Questions around open source software usage Questions around use and best practices Review of the architecture and design where software is implemented Conduct professional services and training engagements Research, understand, and advocate open source software Interact with various open source communities Drive early resolution of issues Present knowledge via articles, blogs, and conference presentations Requirements: Minimum of 10 years of software development and design, systems administration, or level 3-4 technical support experience Minimum 5 years development, design, implementation, and troubleshooting experience on AngularJS At least 2 years in a senior position ( senior/lead developer, engineer, or software architect) Experience resolving remotely exploitable CVEs & cross-site scripting vulnerabilities 10+ years of hands on experience working w/ JavaScript technologies: Highly-skilled JavaScript developer with extensive knowledge of theoretical Angular software engineering Strong expertise w/ HTML, CSS, & writing cross-browser compatible code Understanding of AJAX and #JavaScript DOM manipulation Techniques Experience w/ RESTful services Experience in JavaScript build tools like #Gulp or #Grunt Familiar with JavaScript testing frameworks Virtualization and cloud experience with qemu/kvm, #Azure, #AWS, VirtualBox, #Vagrant Experience working in production environments, especially enterprise/carrier environments Technical knowledge, skills & expertise in complex infrastructure, web-based software and enterprise software Preference given to candidates with implementation and troubleshooting experience on one or more of the following: #Node.js, #npm, #React, #Redux, Vue.js, Aurelia, Apache Cassandra, Jenkins CI, #DockerCE, #ElasticSearch, #Kubernetes, or #MongoDB Experience migrating AngularJS to Angular Experience transitioning AngularJS to other modern JavaScript solutions Committer status on AngularJS product Configured, installed, & maintained JavaScript applications at scale in a production environment Experience tuning JavaScript for reliability & speed <a href="https://www.thegravityapp.com/shared/job?clientId=8a7883c6611cbac301611eab8b34377a&id=8a78859e789e32c30178a443637f5eb3&u=1617663607&v=9&token=eyJ1aWQiOjE1MDk4LCJwcm92aWRlciI6ImJvdW5jZSIsInR5cGUiOiJlbWFpbCJ9.Dg9IeHU6Q0--Nc9szCIncKtZoeM" title="https://www.thegravityapp.com/shared/job?clientId=8a7883c6611cbac301611eab8b34377a&id=8a78859e789e32c30178a443637f5eb3&u=1617663607&v=9&token=eyJ1aWQiOjE1MDk4LCJwcm92aWRlciI6ImJvdW5jZSIsInR5cGUiOiJlbWFpbCJ9.Dg9IeHU6Q0--Nc9szCIncKtZoeM" rel="nofollow noreferrer" class="attachment">https://nu.federati.net/url/280588
Now Hiring: Perforce Software, JavaScript Solutions Architect (AngularJS) - Minneapolis, MN
lnxw48a1: I should probably go ahead and close my #Twitter account. I keep saying I'm going to log in again, but I haven't ... partly because they've now made it impossible to use without turning on #JavaScript / #JabbaShit ... together with all the other unpleasing things about the site, I just don't want to deal with it anymore.
lnxw48a1's status on Sunday, 04-Apr-2021 22:33:27 EDT
I should probably go ahead and close my #Twitter account. I keep saying I'm going to log in again, but I haven't ... partly because they've now made it impossible to use without turning on #JavaScript / #JabbaShit ... together with all the other unpleasing things about the site, I just don't want to deal with it anymore.
lnxw48a1: So I took a cursory look around https://dart.dev/ ... I think #Dart resembles #Java ... this may be why it has far less mindshare than #TypeScript and #CoffeeScript among "compiles to #JavaScript" languages.
lnxw48a1's status on Monday, 08-Feb-2021 21:42:23 EST
So I took a cursory look around https://dart.dev/ ... I think #Dart resembles #Java ... this may be why it has far less mindshare than #TypeScript and #CoffeeScript among "compiles to #JavaScript" languages.
lnxw48a1: Also on hold: I had just started an exploration push with “Deno”:{https://deno.land/} and “JSI/jsish”:{https://jsish.org/} ... but despite being interesting (as interesting as #JavaScript gets, IMO, but with seemingly less of the security nightmare that is Node.js and the NPM package repository), I think it is better to pause it along with the other learning projects. #jsi #jsish #deno #node.js
lnxw48a1's status on Sunday, 07-Feb-2021 13:10:09 EST
Also on hold: I had just started an exploration push with “Deno”:{https://deno.land/} and “JSI/jsish”:{https://jsish.org/} ... but despite being interesting (as interesting as #JavaScript gets, IMO, but with seemingly less of the security nightmare that is Node.js and the NPM package repository), I think it is better to pause it along with the other learning projects. #jsi #jsish #deno #node.js
drak: m3u-Playlist player in Vanilla #Javascript: https://www.draketo.de/software/m3u-player
drak's status on Saturday, 23-Jan-2021 17:03:28 EST
m3u-Playlist player in Vanilla #Javascript: https://www.draketo.de/software/m3u-player
lnxw48a1: I suppose it could be worse. They could clone #PayPal. It's been a few years since I closed my account, but at the time, #PreyPal used #JavaScript during password change time to prevent you from pasting a password in from a password manager. I can't remember whether they also prevented pasting during the process of logging in.
lnxw48a1's status on Saturday, 09-Jan-2021 23:29:50 EST
I suppose it could be worse. They could clone #PayPal. It's been a few years since I closed my account, but at the time, #PreyPal used #JavaScript during password change time to prevent you from pasting a password in from a password manager. I can't remember whether they also prevented pasting during the process of logging in.
hypolite: I'm definitely jumping on the bandwagon of this hot new #JavaScript framework. #programming #Webdev vanilla-js.com
hypolite's status on Thursday, 24-Dec-2020 05:32:31 EST
I'm definitely jumping on the bandwagon of this hot new #JavaScript framework. #programming #Webdev vanilla-js.com
lnxw48a1: It is irritating that so many #socnets think they have to be entirely depending on #JavaScript. Mastodon and #Pleroma both require #JabbaShit before they display anything or have even basic functionality. It is bad, anti-human design.
lnxw48a1's status on Thursday, 03-Dec-2020 17:15:20 EST
It is irritating that so many #socnets think they have to be entirely depending on #JavaScript. Mastodon and #Pleroma both require #JabbaShit before they display anything or have even basic functionality. It is bad, anti-human design.
lnxw48a1: I've reloaded the #NBCNews page so many times that their "please turn off your adblocker" interstitial stopped giving me the view site anyway option. Turning off #JavaScript got rid of that, but no more nice election results map. Switching to #CNN. #USPol #Politics #Election2020
lnxw48a1's status on Tuesday, 03-Nov-2020 22:16:43 EST
I've reloaded the #NBCNews page so many times that their "please turn off your adblocker" interstitial stopped giving me the view site anyway option. Turning off #JavaScript got rid of that, but no more nice election results map. Switching to #CNN. #USPol #Politics #Election2020
lnxw48a1: @mangeurdenuage There are also some sites that try to prevent copy-pasting passwords. I think PayPal does this when people are changing passwords. It's evil, but if users have #JavaScript / #JabbaShit activated, sites can do things like this. I do agree that users need to be willing to think and to learn something when using computing devices. Trying not to have to think, not to learn something is a direct highway to having someone else do all your thinking and make all your decisions and choices for you. I also think developers and companies like to change the UI and the way users interact with software far too often. No, you don't need to follow this year's appearance fad like you followed the fads of the year for the past 2-3 years. Leave things alone for a few years.
lnxw48a1's status on Wednesday, 28-Oct-2020 17:55:46 EDT
@mangeurdenuage There are also some sites that try to prevent copy-pasting passwords. I think PayPal does this when people are changing passwords. It's evil, but if users have #JavaScript / #JabbaShit activated, sites can do things like this. I do agree that users need to be willing to think and to learn something when using computing devices. Trying not to have to think, not to learn something is a direct highway to having someone else do all your thinking and make all your decisions and choices for you. I also think developers and companies like to change the UI and the way users interact with software far too often. No, you don't need to follow this year's appearance fad like you followed the fads of the year for the past 2-3 years. Leave things alone for a few years.
lnxw48a1: @mangeurdenuage Sounds like PleromaFE. I think some instances run alternate front ends which may or may not work without #JavaScript / #JabbaShit.
lnxw48a1's status on Tuesday, 20-Oct-2020 12:38:24 EDT
@mangeurdenuage Sounds like PleromaFE. I think some instances run alternate front ends which may or may not work without #JavaScript / #JabbaShit.
lnxw48a1: "Your browser is not Javascript enable or you have turn it off. We recommend you to activate for better security reason" Oh, yes. Turning on #JavaScript / #JabbaShit is going to improve my security as you plunder my browser history and upload my files and photos to your server. I will turn it on right away.
lnxw48a1's status on Wednesday, 30-Sep-2020 11:35:23 EDT
"Your browser is not Javascript enable or you have turn it off. We recommend you to activate for better security reason" Oh, yes. Turning on #JavaScript / #JabbaShit is going to improve my security as you plunder my browser history and upload my files and photos to your server. I will turn it on right away.
lnxw48a1: JS-based webapps are a lot like adding salt to one's food. There's a point where you're simulating food with colored salt. No matter how appealing it looks, it is still nasty and harmful. #JavaScript #JabbaShit
lnxw48a1's status on Thursday, 10-Sep-2020 20:20:50 EDT
JS-based webapps are a lot like adding salt to one's food. There's a point where you're simulating food with colored salt. No matter how appealing it looks, it is still nasty and harmful. #JavaScript #JabbaShit
lnxw48a1: #JavaScript should be off-by-default and enabled on a per-site basis ... and only if necessary for some particular site function. I just visited http://diveintomark.org/ just to see whether Mr. Pilgrim decided to come back one more time. Instead, I see one of those "this site works better with JS enabled" messages. Being me, I CTRL+U and view source. Yep, just as expected. Adsense.js ... I didn't read farther, so I don't know whether this is one of those squatters. Nope. Not going to turn on JS.
lnxw48a1's status on Tuesday, 01-Sep-2020 16:16:09 EDT
#JavaScript should be off-by-default and enabled on a per-site basis ... and only if necessary for some particular site function. I just visited http://diveintomark.org/ just to see whether Mr. Pilgrim decided to come back one more time. Instead, I see one of those "this site works better with JS enabled" messages. Being me, I CTRL+U and view source. Yep, just as expected. Adsense.js ... I didn't read farther, so I don't know whether this is one of those squatters. Nope. Not going to turn on JS.
schestowitz: #prplfoundation needs to #deleteGithub https://prplfoundation.org/prplmesh/ https://gitlab.com/prpl-foundation/prplmesh both blocked by #javascript and #microsoft #proprietarySoftware
schestowitz's status on Thursday, 27-Aug-2020 05:17:31 EDT
#prplfoundation needs to #deleteGithub https://prplfoundation.org/prplmesh/ https://gitlab.com/prpl-foundation/prplmesh both blocked by #javascript and #microsoft #proprietarySoftware
prplMesh - prpl Foundation, Open Source - IoT, Security and OpenWrt
schestowitz: ● NEWS ● #SecurityWeek #ProprietarySoftware ☞ Ongoing Campaign Uses #Javascript Smuggling for #Malware Delivery https://www.securityweek.com/ongoing-campaign-uses-html-smuggling-malware-deliver
schestowitz's status on Thursday, 20-Aug-2020 04:09:46 EDT
● NEWS ● #SecurityWeek #ProprietarySoftware ☞ Ongoing Campaign Uses #Javascript Smuggling for #Malware Delivery https://www.securityweek.com/ongoing-campaign-uses-html-smuggling-malware-deliver