David<br><br>Thanks for that. I have done a little research and I am not sure that all of the things you mention are as risky as you suggest. The OS you are using does make a difference, as I understand it, because the JS exploit will be downloading the malicious executable from a web site rather than actually carrying out the exploit itself. Also, the malicious JS will need to exploit a browser vulnerability - so if you keep you browser up to date there should not be much risk; the malware writers find the vulnerabilities from the browser authors when they plug the holes and issue and update.<br>
<br>Anyway, this is off topic really, I apologise and you're right there is a risk. But I am happy to continue with JavaScript enabled on my computers.<br><br>Tony<br><br><div class="gmail_quote">On 1 October 2011 20:44, david <span dir="ltr"><<a href="mailto:gnome@hawaii.rr.com">gnome@hawaii.rr.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Your OS makes no difference: malicious Javascript uses the browser as its platform, not the OS.<br>
<br>
It's possible to Javascript to turn your browser session into a bot; it's possible to use Javascript to probe networks hidden behind routers and firewalls, identify targets and route target-specific attacks to those targets; it's possible for Javascript to capture login IDs and passwords.<br>
<br>
It's possible to use Javascript to track what sites you go to and what you do there - which is why Google says its OK to run Javascript. Their Google Analytics tool requires Javascript. So if someone has Javascript turned off, Google doesn't get any tracking information to use and sell to their paying customers.<br>
<br>
There's no need to require Javascript for site navigation.<br>
<br>
Tony Austin wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Is JavaScript so bad? Why turn it off? I am happy to have it on all the time and the worries are much less under Linux. It's not Java or ActiveX after all.<br>
<br></div>
On 1 October 2011 10:34, Arve Barsnes wrote:<div class="im"><br>
<br>
On 1 October 2011 08:53, Lorenzo Sutton wrote:<br>
> On 10/01/2011 04:14 AM, Ken Restivo wrote:<br>
>><br>
>> On Sat, Oct 01, 2011 at 03:00:02AM +0200, Peter Crighton wrote:<br>
>>><br>
>>> Hello list,<br>
>>> I just wanted to let you know that I started a new blog about<br>
>>> Recording on Linux: <a href="http://linux-recording.blogspot.com/" target="_blank">http://linux-recording.<u></u>blogspot.com/</a><br></div><div><div></div><div class="h5">
>>> The first entry (well, not counting the introduction here) is about<br>
>>> using the Analogue Drums Big Mono drumkit with Hydrogen. Let me<br>
know<br>
>>> what you think about the blog, any constructive criticism is much<br>
>>> appreciated!<br>
>>><br>
>><br>
>> *sigh*, Google, doesn't anyone use HTML anymore?<br>
>><br>
>> This is what that website looks like with JavaScript turned off:<br>
>><br>
>> <a href="http://storage.restivo.org/misc/blogger.jpg" target="_blank">http://storage.restivo.org/<u></u>misc/blogger.jpg</a><br>
>><br>
>> I'm sure it's a fantastic blog, but, I dunno what Google has<br>
done to it.<br>
><br>
> If truth be told it seems a problem with this particular blog<br>
(which by the<br>
> way seems a very cool idea ;) - other blogspot blogs seem to work<br>
with<br>
> JavaScript turned off.<br>
><br>
> I'm not a blogger user so I'm not sure what google puts in when<br>
you create a<br>
> blog and what it leaves to the user. Maybe, the massive use of<br>
JavaScript<br>
> comes in for recently created ones?<br>
><br>
> That said. Yes it seems that google is pushing more and more for<br>
the use of<br>
> JavaScript see e.g.<br>
><br>
<a href="http://googlesystem.blogspot.com/2007/05/no-javascript-no-google-navigation.html" target="_blank">http://googlesystem.blogspot.<u></u>com/2007/05/no-javascript-no-<u></u>google-navigation.html</a><br>
><br>
It seems that, without allowing javascript from <a href="http://blogblog.com" target="_blank">blogblog.com</a><br></div></div>
<<a href="http://blogblog.com" target="_blank">http://blogblog.com</a>> this<div class="im"><br>
particular blog doesn't work at all. Is that also owned by Google?<br>
<br>
Arve<br>
</div></blockquote><font color="#888888">
<br>
-- <br>
David<br>
<a href="mailto:gnome@hawaii.rr.com" target="_blank">gnome@hawaii.rr.com</a><br>
authenticity, honesty, community</font><div><div></div><div class="h5"><br>
______________________________<u></u>_________________<br>
Linux-audio-user mailing list<br>
<a href="mailto:Linux-audio-user@lists.linuxaudio.org" target="_blank">Linux-audio-user@lists.<u></u>linuxaudio.org</a><br>
<a href="http://lists.linuxaudio.org/listinfo/linux-audio-user" target="_blank">http://lists.linuxaudio.org/<u></u>listinfo/linux-audio-user</a><br>
</div></div></blockquote></div><br>