On Mon, Sep 09, 2013 at 10:15:02AM -0400, liberationt...@lewman.us wrote:
> On Mon, 09 Sep 2013 11:23:30 +0200
> Axel Simon <axelsi...@axelsimon.net> wrote:
> 
> > Am I the only one for whom the page is hidden behind an
> > annoying "sign up" overlay? 
> 
> If you disable javascript for the site there is no overlay. If you
> selectively block javascript from anything not fp.com, the overlay
> doesn't load either. Trusting users with your revenue model seems
> an odd choice to me.

I'm kind of surprised FP's javascript is the main topic of discussion around
this article. Doesn't anyone want to talk about the Army Intelligence and
Security Command's Information Dominance Center being designed to mimic the
bridge of the Starship Enterprise? Or that Keith Alexander wanted to do
domestic surveillance when he was working there, too, and "said at one point
that a lot of things aren't clearly legal, but that doesn't make them illegal"?
Or that Rasmussen polls found 68 percent of respondents now believe it's likely
the government is listening to their communications and 57 percent said they
think it's likely that the government will use NSA intelligence "to harass
political opponents."? No?

Ok, well as long as we're talking about that FP javascript overlay: if you saw
it, that means you run JavaScript by default, which means you're vulnerable to
a larger number of the arbitrary-code-execution bugs in your web browser (of
which there are undoubtedly many more which are not yet fixed, given the
frequency with which new ones are discovered [1,2]). In my opinion, if you're
using Firefox, you should really be using NoScript. [3]

~leif

ps: Thank you FP and Shane Harris for this very informative article!

1: https://www.mozilla.org/security/known-vulnerabilities/firefox.html
2: 
http://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-15031/opec-1/Google-Chrome.html
3: http://noscript.net/
-- 
Liberationtech is a public list whose archives are searchable on Google. 
Violations of list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Reply via email to