Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No, the person using the browser that loads the scripts is the user. The user has the option to disable JavaScript, so they are responsible for whatever they allow to be run on the machine.

If you don't trust yourself to use the web safely, then put limits on what a naughty script can do. One option is to disable hyperthreading.



That's like saying that its the users fault if their box was compromised by heartbleed. You never know what exploits are out there.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: