Comments for Is Javascript dangerous?

Comment from Holly on 2010-02-17

2010-02-18T07:36:05Z

A great strait-to-the-point and accurate article!

The problem is, as the intaknetz evolves, users demand more functionality, which means handing more power over to the developers. But this also means people with a malicious intent have more tools at their disposal.

But as well as this, rumors get started and spread quickly about "how dangerous JS really is". I do not deny it can be used to very dubious effects, like stealing data stored in cookies for example. But people do get paranoid about these things, and thinks everyone is out to get them, which isn't true.

Javascript's capabilities are solely in the hands of your browser, so if the web page is being granted too much power (Like changing security settings), you should switch to a different browser. Or, as this article so rightly points out, stay up-to-date with your updates, because as better security procedures and safeguards are implemented, better hacks and back doors are found; the best bet is to try and stay one step ahead of them.

And as for NoScript... Never used it because i've never felt a reason to do so; i feel competent enough to judge whether a site is trustworthy and would not allow itself to be compromised (My fault if i'm wrong.). But yes, if a friend asked me: "How can i improve the security of Firefox?"(I don't know of any NoScript equivalents for the other "major" browsers.), i would recommend it, as by completely denying the code to be executed until explicitly allowed to do so, you will lower your chances of getting any nasty surprises, but you have to remember, there is nothing stopping you allowing something malicious to run.

...just saying...

]]>

A comment on: Is Javascript dangerous?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from za on 2010-02-07

2010-02-07T20:57:31Z

Javascript can't turn off the security settings in your browser...that's a bit misleading. It can however control the way the browser acts while you are on the site. If it acts weird on your computer, just close the browser or if necessary use taskmanager through ctrl+alt+delete keys and don't return to that site. Web browsers don't allow Javascript to write to your local harddrive directly...making it safer than other languages.

]]>

A comment on: Is Javascript dangerous?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from dlatner on 2009-11-24

2009-11-24T22:39:02Z

Actually, that explanation isn't totally correct. Javascript can be quite dangerous because it allows control of all settings inside the browser. A simple example is seen on many web sites that disable your back button as soon as you arrive at the site -- trapping you on their site. You have to actually close your browser to get out. Very annoying. But more dangerous is the fact that they can change ANY setting in your browser -- not just the back button. So javascript apps can actually turn off your security settings in your browser, and then let all types of malicious software in from that (or other) web sites. I recommend keeping javascript off for safety, except for sites that you trust and really require it to run. Ditto for activeX and most of all, Flash.

]]>

A comment on: Is Javascript dangerous?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Linda on 2009-04-10

2009-04-11T05:28:29Z

I have heard a great deal about java script and for the most part not too many good things. However I can see the advantage of having java script, it makes the site pages come alive. Safety is a concern of mine as well, therefore I am asking you about No Script. What exactly is NoScript? A program in and of itself? Or a helper dll that can be activated and deactivated at will? Where does one find NoScript at?

]]>

A comment on: Is Javascript dangerous?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from SZEBI on 2008-01-15

2008-01-15T20:02:18Z

I say that you leva these problem because i see that you don`t know more from javascript >:P

]]>

A comment on: Is Javascript dangerous?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Smite man on 2007-11-15

2007-11-15T10:09:33Z

interesting and concise. Thank you.

]]>

A comment on: Is Javascript dangerous?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jeff on 2007-09-13

2007-09-14T00:09:07Z

but how do we know that "NoScript" is actually safe itself? Thanks,

]]>

A comment on: Is Javascript dangerous?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.