_________________________________
Shit from ComCrap. It's a damn shame no one can have a decent internet service anymore. They're all shit, if you ask me.
Frontier's DSL service sucks shit too.
![]() |
| 0.26 Mbps ! Seriously? We're paying for 12 Megs! |
![]() |
| 0.26 Mbps ! Seriously? We're paying for 12 Megs! |
Am I the only one getting frustrated by the ridiculous overuse of Javascript in web pages these days?
I wanted to check the temperature in my local area. So I browse to the website of my local television news station. The website loads slowly. It's like watching paint dry. It's reminiscent of being on dial-up. So I check the source and count over 30 javascript files being included.
What happened to usability? What happened to the emphasis on speed and not making users wait over 15 seconds to view a web page?
What kind of developer thinks it is a good idea to have that many javascript files included in a web page? The number of Javascript files I counted was 32 including analytics scripts. I can't imagine how long it would take to do all that on a slow connection.
Javascript annoys me when it is required for the site to function, especially for things that should not depend on it (like opening a link). Basically your site should work perfectly with Javascript disabled - the Javascript should just make it nicer to use.
Say I have javascript disabled (for whatever reason - security, paranoia, CPU usage, ad-blocking etc), I should still be view that picture, albeit not with a fancy Lightbox effect, or submit a form, again albeit without dynamic in-line error reporting)
There's nothing "wrong" with Javascript, it just shouldn't be obnoxious, or mandatory.
---
Javascript is a major attack vector for drive-by downloads.
Many browser vulnerabilites can only be attacked through javaScript, and about half the security alerts issued about browsers read "while we're working on a patch to this vulnerability, you can protect yourself against it by disabling scripting".
On what machines do you think those spam bots are running? Nowadays, most of them fell victim to a drive-by download on some website that used Javascript to attack a browser vulnerability, and in many cases the malicious code got into that website through an XSS attack. A study conducted by Google last year found 10% of all websites they surveyed to contain such attacks!
So yes, Javascript (Flash too, btw) is very much the problem, not the solution, and it's becoming a bigger and bigger problem. Eventually it will be too big to tolerate; you better be prepared to find a way to make your website work without Javascript when every single Joe User out there has (or closely knows someone who has) had their ebay acount, paypal account or even bank account broken into, and is told they could have avoided it by deactivating Javascript in their browser.
Of course, this is a worst-case scenario, and maybe browser developers will manage to get their act together, or some sort of sandboxing technology for Javascript engines (or the browsers themselves) becomes prevalent, though that would still do nothing to counter XSS.
But saying that Javascript is not a problem right now betrays appaling ignorance in someone who develops web apps professionally.
---
you all miss one important thing. With client-side scripting, MY BROWSER is where all the stuff is executed. And if I allow this to happen, I thereby give YOU, the damn site developer, nearly full control over my browser. I can even agree with some people here who says JavaScript as such (as a programming language) is not bad, the bad thing is the idea of client-side scripting.
JavaScript being executed within the client's browser is malicious and dangerous by design. Many people continue to say that -- well -- JS virtual machines are buggy, yes, and security holes are found, one by one, in these machines, but the problem is not with the client side scripting, only with implementations of these virtual machines, and one day we implement a secure JS VM, and everything will be fine. That's LIE. Just one thing: the CPU time needed to render a page. Without Turing-complete code on the page, the time is just a (almost linear) function of the HTML length. But once we get the Turing-complete code and allow it to execute, the rendering time is not only no longer a function of anything, it is UNPREDICTABLE (hell, mathematically proven to be unpredictable).
These web developers who use JS (actually, nearly all existing web developers, which is sad) force us, their users, to trust them so fanatically so we don't mind to give them full control on our browsers. Hey, may be you also need a key of my house?
Re: [Vaccination-Liberation] Vac-Lib website DANGEROUS???
Dewey Ross Duffel to Vaccination-Liberation - 6 hrs ago
Hi everybody
Google has removed its warning from VacLib.org following my request for
review.
Thanks for your patience.
Dewey
Meryl
I did not send out an email but someone asked what was up with the warning they were getting on their browser.
Basically, some else had sent an email a few hours earlier asking what was happening to VacLib.org due to the warning their browser was telling them that VacLib.org was an attack site.
I checked the files in the main VacLib site and discovered that several had a common date (Feb 7). I had not uploaded but one file on that date. After checking the files I discovered that several files had a script inserted into the head of the file.
I uploaded copies of the site files from my computer and over-rode the infected ones. Then had to ask Google Webmaster tools to re-inspect the site so the warning would stop being broadcast.
Hoping all is well with your own AVN site and yourself.
Dewey
Meryl Dorey wrote:
>
>
> Hi Dewey,
>
> I think I missed the beginning of this conversation. Did you send out an email about why google had put a warning on the vaclib.org website? If so and you still have it there, can I please ask you to resent it?
>
> Thanks,
> Meryl
Joan
VacLib.org was hacked again. I have overwritten the suspect files.
Requested a change in PassWord and requested google review the site.
To the best of my knowledge, VacLib.org is now clean but even if Google agrees, it will take some hours for the warning to clear. I will continue to check.
Best Regards
Dewey
VacLib.org web manager.
Joan wrote:
What is up with Google and Vac-Lib? I get this:
"Warning - visiting this website may harm your computer"
What happened?