Hacker News Reader

I wonder if along with these byte code engines we'll get capability grained control systems too. Somehow I doubt it though.

So in the future, when you visit a website they'll be able to Eg: open windows, pop up unblockable modals, webGL, bytecode loaded spam/ads, etc. The end users option will be to block everything, or live with it.

I do not like this bold new world we're entering.

View on HN

This is a common confusion somehow. The programming language has nothing to do with the APIs provided by an environment. JavaScript can do all those things now, as long as you run it in an environment that provides APIs to do those things (node.js, electron etc). The browser is not that environment. When you write a keylogger virus in C, you are relying on the APIs provided by the environment to do it, they don't come from the C language.

I wasn't confused at all. Technically there is a difference between a language, an API and a platform.

That's all true in the case of NodeJS and the like, but not true for web browsers. There the language the API and the platform come as one.

The result is, remote websites can execute code on a users computer. With no control except for simple technical measures.

Reply on news.ycombinator.com