The website for an Indian restaurant I'm visiting later (https://lastdaysoftheraj.com/), open in Brave on Android. The screen is completely blank; and Brave has detected that, while the site itself is being delivered kver HTTPS, external content is being delivered unencrypted.

top 51 comments

sorted by: hot top controversial new old
[–] 70 points 1 year ago* (last edited 1 year ago) (15 children)

Skill issue - on the devs side.

A lot of pages even fail if you only disable 3rd-party scripts (my default setting on mobile).

I consider them broken, since the platform is to render a Document Object Model; scripting is secondary functionality and having no fallbacks is bad practice.
Imagine if that were a pdf/epub.

  • source
  • hideshow 15 child comments
  • [–] 12 points 1 year ago (2 children)

    no fallbacks is bad practice.

    This is how you know they're extra lazy -- no "please enable javascript because we suck and have no noscript version".

  • source
  • parent
  • hideshow 2 child comments
  • [–] 28 points 1 year ago (6 children)

    wild thing is that with modern css and local fonts (nerdfonts, etc), you can make a simple page with a modern grid and nested css without requiring a single third party library or js.

    devs are just lazy.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 15 points 1 year ago (1 child)

    devs are just lazy.

    *cost-efficient. At this point it's a race to the bottom.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (-1 replies)
  • [–] 3 points 1 year ago (2 children)

    Have you ever built anything more complex with CSS and HTML5? It is a massive pain

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 year ago (1 child)

    Personally, I love server-side rendering, I think it's the best way to ensure your content works the way YOU built it. However, offloading the processing to the client saves money, and makes sense if you're also planning on turning it into an electron app.

    I feel it's better practice to use a DNS that blocks traffic for known telemetry and malware.

    Personally, I used to blacklist all scripts and turn them on one at a time till I had the functionality I needed.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago* (1 child)

    But they're not pdf/e-pub, they're live pages that support changing things in the DOM dynamically. I'm sorry, I'm not trying to be mean but people not wanting scripting on their sites are a niche inside a niche, so in terms of prioritising fixing things that's a very small audience with a very small ROI if done they might require a huge rewrite. It's just not financially feasible for not much of a reason other than puritan ones.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 38 points 1 year ago (13 children)
  • [+] [S] -19 points 1 year ago (12 children)

    I flip back and forth between Brave and Tor Browser, depending on which one appears less fingerprintable; and I've disabled all of the analytics.

  • source
  • parent
  • hideshow 12 child comments
  • [–] 12 points 1 year ago* (6 children)

    The more things you block, the more unique and fingerprintable you become. Blocking JavaScript altogether may mitigate some of that, but you can be fingerprinted even without JS.

    Tor is a little better because they make your browser blend pretty well with other Tor browsers, so instead of being unique 1 of 1 you’re more like 1 out of all Tor users.

    I haven’t looked into this in a couple years, but that is my takeaway last time I went down the privacy/fingerprint rabbit hole.

  • source
  • parent
  • hideshow 6 child comments
  • [–] [S] 1 point 1 year ago (2 children)

    I know, and I'm still researching the best way to mitigate this. So far, I've come away with the impression that Tor Browser and Brave do the best jobs of minimising fingerprinting, otherwise I would have just disabled JS in Vanadium and called it a day.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 1 year ago* (last edited 1 year ago) (2 children)

    (Not talking about a specific browser, just in general) Maybe I'm misunderstanding but when the VPN makes a request for the page information the request isn't forwarding the browser information is it? So wouldn't most of that be mitigated there?

    As in the VPNs sever making the request should show when they scrape that information, not the end user. Maybe I'm not understanding that though.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 1 year ago* (1 child)

    A VPN doesn’t alter the requests your browser is making. It just masks your IP address. So any information about your browser is still sent. The exception would be if your VPN provides some sort of tracker/ad blocking feature where it can block certain requests. But it’s not really a magic switch that prevents websites from tracking you.

  • source
  • parent
  • hideshow 1 child comment
  • Yeah if it's sending the data and not searching from the server itself it would make it easier to track you having higher security almost. Because it would make your identifiers more unique if everyone else wasn't... That's food for thought

  • source
  • parent
  • [–] 18 points 1 year ago* (4 children)

    it's still owned by a homophobe that loves crypto, and is likely an antivaxxer.

    He was run out of Mozilla after only eleven days as CEO, and he helped found it!

    the guy is an asshole, and he's very likely using brave money for evil shit.

  • source
  • parent
  • hideshow 4 child comments
  • [+] 11 points 1 year ago (8 children)
  • [–] 9 points 1 year ago (3 children)

    WASM and cry because you can't directly modify the DOM without JS.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 1 year ago (1 child)

    You can't modify the DOM.

    But some most dynamicity can stay - sites can be built freely server-side, and even some "dynamic" functionality like menus can be made using css pseudoclasses.

    Sure, you won't have a Google Docs or Gmail webapp, but 90% of stuff doesn't actually need one.

    A basic website doesn't require js.

    A webshop, for example, does for the part around adding to cart and checkout - but it doesn't for merely browsing.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    For a web store you probably only need Javascript for payment processing. Insofar as I've seen pretty much all of the widgets provided by the card processors outright require Javascript (and most of them are also exceedingly janky, regardless of what they look like on the outside to the user).

    You definitely don't need Javascript just for a shopping cart, though. That can all be done server side.

  • source
  • parent
  • [–] [S] 5 points 1 year ago* (1 child)

    HTML and CSS can do quite a lot, and you can use PHP or cgi-bin for some scripting.

    Of course, it's not a perfect alternative. JavaScript is sometimes the only option; but a website like the one I was trying to use could easily have just been a static site.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    htmx or equivalent technologies. The idea is to render as much as possible server side, and then use JS for the things that can't be rendered there or require interactivity. And at the very least, serve the JS from your server, don't leak requests to random CDNs.

  • source
  • parent
  • [–] -1 points 1 year ago

    I mean you could build a site in next.js, ironically. Which is very counter intuitive because it literally is js you are writing, but you can write it to not do dynamic things so it effectively would be a static server rendered site that, if js is enabled, gets for free things like a loader bar and quick navigation transitions. If js is disabled it functions just like a standard static site.

  • source
  • parent
  • [–] 9 points 1 year ago (1 child)

    I use uBlock medium mode, and if I can't get a website to work without having to enable JavaScript, then I just leave the website.

  • source
  • hideshow 1 child comment
  • [–] 15 points 1 year ago (1 child)

    I have 13 sites whitelisted to allow JS. The internet is fairly usable for me without JS.

  • source
  • hideshow 1 child comment
  • [–] 31 points 1 year ago (6 children)

    because modern webdevs cant do anything without react

  • source
  • hideshow 6 child comments
  • load more comments
    view more: next ›