(snippage throughout)

>> 4. consider using javascript flash detection. one side unfortunate
>> side effect of this is that users with javascript disabled will not be
>> served flash content. but neither will googlebot.
> 
> Um, no, this is old news. Flash Player 8 is already 98% penetration and
> Player 9 is already at 90 and growing fast. Any idiot turning off
> Javascript in today's AJAX-happy world, should not be allowed to use the
> browser anymore. Yes, reallly.

No, Reallly. Anyone who leaves javascript on should not be allowed on the
internet anymore. (ok, I suggest using noscript. Leave enough for me to decide
to allow your site.)

A quick search of google news shows about 60 (news) items in the last month.
http://news.google.com/news?q=javascript+exploit

>> 5. if you use javascript flash detection, provide alternate identical
>> content. for every paragraph in the flash file, put one in plain text.
>> hide this content with javascript if you serve them the flash content.
> 
> Unless you are a jaded Linux guy (as I feel compelled to allow this
> exception), if you don't have Flash, again, you should be banned from
> the internet completely. You dweeb.

(Ok, I'm a ??jaded?? Linux guy, but...) If you don't leave enough of your
webpage visible without flash to convince me to turn them on, I won't. (Here I
also suggest flashblock)

I usually do this more for blocking annoying ads than for security/privacy 
issues.

> Use Flash. Use it wisely. The image produced on this site is pretty
> good, actually. It would be a shame to lose it.

Good advice. Use it wisely.

Orson

_______________________________________________

UPHPU mailing list
[email protected]
http://uphpu.org/mailman/listinfo/uphpu
IRC: #uphpu on irc.freenode.net

Reply via email to