Hacker News Reader

There are several systems that must run untrusted code. Such as advertisement.

We actually depend on real private methods.

just because what you do every day makes it useless, it's presumptuous to assume it's the same for everyone.

Your code on the client side is merely a convenience for malicious advertisement code if accessible. How your client side code interacts with the server is what matters and the malicious code can do whatever your code can do with same privileges if you are including it on your page.

If you are running untrusted code in JS then real private methods have only given you a very false sense of security. You should have run it in a sandboxed process instead.

just because what you do every day makes it useless, it's presumptuous to assume it's the same for everyone.

Exactly why I asked...

fair. But it is still presumptuous to write an article about the subject and not even consider someone else has a use for it.

Reply on news.ycombinator.com