Re: Any textual web browser handling javascript?
On Fri, Nov 21, 2008 at 04:00:18AM -0600, Ron Johnson wrote:
> On 11/20/08 23:13, Douglas A. Tutty wrote:
> [snip]
> >
> >I don't have javascript enabled on my normal user account's browsers
> >(Konq or Iceweasel) yet the advanced search page works just fine. (I
> >have a separate user for use with javascript and flash).
>
> *Why?*
>
I did that during a period when every time you turned around, iceweasel
had a security update. I have rather private data in my home directory,
and I'm in groups such as adm, staff, and wheel. A buggy iceweasel
could allow a malicious javascript to access my info, or do anything as me.
It therefore made sense to set up a separate user for times when I need
to run javascript or flash on sites which I don't specifically trust
(i.e. just random surfing). Since any site I do actual transactions
with (e.g. my own bank) are specifically trusted, I do that as myself.
Doug.
Reply to: