I’m reading a lot of personal blogs that don’t use JS at all, or at least are still functional with JS blocked. A somewhat surprising amount of websites work without it.
The issue with JS is that while I assume that your use of JS is relatively minimal and you’re not malicious, I don’t know that, and even if you’re not actively malicious, your site might still be compromized by exploited JS vulnerabilities, site hacks or uninformed/negligent choices of third party libraries/plugins/CDNs (NPM is notorious for supply chain attacks and lots of otherwise alright sites include font CDNs or even analytics). I’m not super anal about not using any site that doesn’t work without JS, but having it off by default is definitely good practice and sometimes I do decide that I don’t want to see a site that badly.
Although I don’t have any illusions that my website can’t be hacked what I can tell you is that nothing on there is standard. Every single inch of my website is custom made by myself (graphics, code, music, everything) and since its closed off (there’s no posting on it, nor any SQL) I THINK its relatively safe. I do strive to do that, heck it doesn’t even write any cookies. (I did that deliberately since we have the cookie law around here, and I decided to go overboard and not have any cookies on AmigaCam at all, stateless)
I do agree with you though, I mean one can never be too safe.
The security issues are the reason that, if I do decide to enable javascript, it’s in a disposable whonix qube. Which is basically what the bottom left panel of the meme is describing. Whereas the bottom right describes my general lack of desire to enable it at all.
I’m reading a lot of personal blogs that don’t use JS at all, or at least are still functional with JS blocked. A somewhat surprising amount of websites work without it.
The issue with JS is that while I assume that your use of JS is relatively minimal and you’re not malicious, I don’t know that, and even if you’re not actively malicious, your site might still be compromized by exploited JS vulnerabilities, site hacks or uninformed/negligent choices of third party libraries/plugins/CDNs (NPM is notorious for supply chain attacks and lots of otherwise alright sites include font CDNs or even analytics). I’m not super anal about not using any site that doesn’t work without JS, but having it off by default is definitely good practice and sometimes I do decide that I don’t want to see a site that badly.
Although I don’t have any illusions that my website can’t be hacked what I can tell you is that nothing on there is standard. Every single inch of my website is custom made by myself (graphics, code, music, everything) and since its closed off (there’s no posting on it, nor any SQL) I THINK its relatively safe. I do strive to do that, heck it doesn’t even write any cookies. (I did that deliberately since we have the cookie law around here, and I decided to go overboard and not have any cookies on AmigaCam at all, stateless)
I do agree with you though, I mean one can never be too safe.
The security issues are the reason that, if I do decide to enable javascript, it’s in a disposable whonix qube. Which is basically what the bottom left panel of the meme is describing. Whereas the bottom right describes my general lack of desire to enable it at all.
Quite sensible!