Hacker News Reader

To be real, any time you visit any site you're running 3rd party code you didn't invite. NPM modules, random scripts from CDNs or stored off in a /libs directory, hardly any sites are built entirely on code hosted or written by the party running that site. Ads get a bad rap, but if you're running JS on the modern web it's not even the biggest culprit.

View on HN

True, but when I say "3rd party code" I was specifically referring to code coming from a 3rd party server and therefore not under the control of the 1st party. If the site I visit hosts the code then I trust it because I trust the 1st party (not saying that's necessarily a good idea, but it's my current philosophy).

I have uBlock Origin set to block any 3rd party requests, so I do have to explicitly "invite" any such code/resources. And you can tell uBlock to remember those invites. This feature has made the web bearable again.

Reply on news.ycombinator.com