sent from a disposable whonix qube

  • keiko@fedia.ioOP
    link
    fedilink
    arrow-up
    0
    ·
    4 days ago

    @wonderingwanderer@sopuli.xyz That’s the problem though, why is it standard for websites to be built in such a way that their basic functionality depends on allowing such arbitrary scripts? Shouldn’t there be some regulatory body that tells them that’s against the rules or something?

    @rtxn@lemmy.world Do you want regulatory overreach?

    @wonderingwanderer@sopuli.xyz I don’t view basic consumer rights as “regulatory overreach.”

    @rtxn@lemmy.world Imagine forcing every small project or self-hoster to adhere to the rules set by the equivalent of the HDMI Forum, but controlled by the likes of Microsoft and Facebook.

    @wonderingwanderer@sopuli.xyz No and no. I never said it should be corporations setting the standard. That’s the FCC’s job, and comparable agencies in other countries. The FCC already regulates many things about the internet. Some things they don’t regulate enough. […]

    […]

    Also, there’s such thing as the IEEE. Standards for web development are not unheard of, and they’re not categorically wrong. There need to be rules governing the rules that govern web development to ensure those rules aren’t abused. But setting no rules or standards would be insane.

    @rtxn@lemmy.world To redirect your other question: you should ask the web developers. If they’re honest, you’ll get a dozen legitimate answers that can’t be solved without locally running code.

    @wonderingwanderer@sopuli.xyz That’s not honesty. That’s deflection and dissembling. Sure, you can think of a dozen different reasons why scripts need to be run locally. But that doesn’t excuse using those scripts as a trojan horse for malicious data mining practices. Permissions can be atomized.

    If a web developer can’t compartmentalize the part of the script that loads an image on their website from the part of the script that harvests sensitive fingerprinting data that the website has no legitimate need for, then they’re either a really bad developer who’s never heard of modularity, or they’re doing it deliberately and maliciously because they know they can get away with it and are choosing to make their website break for anyone who doesn’t let them basically peep under their device’s skirt.

    Oh la la!

    • keiko@fedia.ioOP
      link
      fedilink
      arrow-up
      0
      ·
      4 days ago

      @Kangae_Hishiryo@scribe.disroot.org I get your point, yeah. I actually do think that scripts should’ve hugely modularized, compartmentalized, and browsers should’ve using OCaps instead of ACLs, or at least make more granular ACLs so you can finetune what can or what cannot do a given site and/or a given script.

      @wonderingwanderer@sopuli.xyz Thank you! It seems pretty clear to me, modularity is supposed to be the modern standard for quality code, so why are we normalizing websites that use scripts with more arms than Cthulhu harvesting uniquely identifiable data from our personal devices by running arbitrary code locally? It seems insane to me…

      “One tool for one job.” It’s pretty basic Unix philosophy. So why do we now have “One script for several hundred different fingerprint variables, oh and also the website’s basic functionality”?

      @Kangae_Hishiryo@scribe.disroot.org *A wild Systemd spawns*

      @wonderingwanderer@sopuli.xyz You can’t escape!

      This kinda brings the thread full-circle back to my os tier list :D

      • wonderingwanderer@sopuli.xyz
        link
        fedilink
        arrow-up
        0
        ·
        4 days ago

        Oh, you made that one? I actually saved it because it’s legitimately helpful. A lot of tier lists really just reflect a person’s preference, but I liked how you grouped yours by category. I’ll be referencing it as I explore more distros

        • keiko@fedia.ioOP
          link
          fedilink
          arrow-up
          0
          ·
          4 days ago

          I feel kinda weird replying since my comment to which you replied was removed by a mod, and I have no idea why, as there is no reason given in the mod log. I had been trying to respond to the messages which I was and am unable to directly access, due to my instance’s defederation policies, but it seems that I’ve inadvertently upset someone and feel that I should probably stop interacting here, so as not to cause problems.

          Thank you for your appreciation 🩷

          • wonderingwanderer@sopuli.xyz
            link
            fedilink
            arrow-up
            0
            ·
            4 days ago

            Ah, that’s strange. Sorry that happened to you. Maybe the mod missed you’re top-level comment where you explained so they thought you were spamming.

            Have a nice day