• mox@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    edit-2
    1 month ago

    I love this in principle.

    I just wish Mastodon instances were viewable without JavaScript. Opening the door to many types of browser exploit and fingerprinting shouldn’t be required just for reading.

      • Draconic NEO@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 month ago

        It also does have an API which can be used by apps, including alternate frontends which don’t use JS.

      • AbsoluteChicagoDog@lemm.ee
        link
        fedilink
        English
        arrow-up
        7
        ·
        1 month ago

        It’s simple, when you understand how shaky the foundation of all digital infrastructure is it’s impossible to not be paranoid.

        • T156@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 month ago

          Relevant XKCD.

          The Polyfill incident is bad (that seems to be how the hackers got into the internet archive), and the OpenSSH one could have been really nasty, if it wasn’t caught both early, and by chance (a performance engineer at a major software company noticed).

      • mox@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        1 month ago

        idk how you spare the effort.

        When you’ve been building networked systems for longer than JavaScript has existed, it no longer takes effort to spot design choices that put users at risk. When you’ve watched endless vulnerabilities be exploited over the years, it’s not paranoia, but a real-world problem that impacts real people. At that point, the flaws are impossible to responsibly ignore.

        Spreading awareness and showing people how to build safer systems does sometimes get tiring, but I think it’s important.

      • communism@lemmy.ml
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 month ago

        It’s not paranoid to complain about the unnecessity of javascript when all you want to do is read a public text post on a social media platform. I have javascript disabled on some browsers, and it’s annoying to have to whitelist a site that really shouldn’t need it.

        • Echo Dot@feddit.uk
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          2
          ·
          1 month ago

          Isn’t it basically a fundamental underlying technology of the web I don’t understand how you can have it disabled and still be able to access modern websites.

          • WhyJiffie@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            3
            ·
            1 month ago

            it isn’t. that is html and css, some would argue it’s html only.

            javascript is not needed to load a website. It’s useful for interaction, and needed to load content separately and dynamically. without it you get a mostly (but not totally) static document like in Office Word

              • WhyJiffie@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                2
                ·
                edit-2
                20 days ago

                that does not mean javascript is essential, and mox’s point is still very valid.

                using WASM instead of JS is not better either. you simply don’t need any clientside executable code on a read-only view of a page

      • JoeBigelow@lemmy.ca
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 month ago

        I actually gave up recently for my mental health of all things. Turns out accepting being tracked in just about everything I do but also getting all the benefits of living in the future, without the effort spent on mitigation, is a huge relief. Does Google know my daily routine? Yes. Did they when I had the tin foil hat on? Probably also yes.

        • tabular@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 month ago

          I find the negatives detract from the benefits too much, usually. Like having your arm cut off and then receiving lovemaking: I am no longer in the mood.

    • Kecessa@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      2
      ·
      1 month ago

      At the same time people on here are defending the centralization of PC gaming on Steam so even fediverse users don’t understand decentralization

      • Duamerthrax@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 month ago

        I think people just prefer Steam to Epic or EA’s store fronts. Whenever GoG gets brought up, the only major complaint is is that there’s no official Linux launcher, even when there are Linux binaries for the games.

      • GoodEye8@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        1 month ago

        How do you imagine decentralized gaming? Every game comes with it’s own launcher?

        • OhYeah@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 month ago

          The idea is for games to be launcher independent/compatible with many launchers. If I wanna play a game I got on gog I could use the official launcher, heroic, mini galaxy, or I could even use no launcher and just download the game installers directly

    • SpaceCowboy@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      The instance I’m on isn’t federated with every other instance. Why would you expect steam to effectively federate with every instance?