Daniel James  writes:
> Mayayana wrote:
>> So you disable all javascript, I presume? Or do you just log
>> on as a lackey user who has no access to the Internet?
>
> Javascript and ActiveX are completely different propositions.
> Javascript programs are executed within an environment defined by the
> browser, and are sandboxed so that they do not have access to the
> native OS (bugs notwithstanding).

‘bugs notwithstanding’ hides rather a lot of detail - isolation turns
out to be harder in practice than previously envisaged, with Spectre in
particular being a good example of the challenges.

Secondly the legitimate API surface available to JavaScript keeps on
growing. It still can’t do everything, but the gap keeps shrinking.

Finally as more functionality moves to web applications, the less the
distinction matters. For example the fact that JavaScript can’t access
your local files isn’t very relevant if the stuff you care about is in
Google Docs.

--
https://www.greenend.org.uk/rjk/

--- SoupGate-Win32 v1.05