Hacker News Reader

1) Whitelist and allow only trusted sites to exicute script on your devices.

Sorry, securitycheckli.st I can't see your content because you fail this basic test.

I don't get it. The word "whitelist" doesn't appear anywhere on the page, for me. Has the content changed? Or are you sincerely suggesting that nobody should ever load a webpage from a non-trusted domain?

Not "load a webpage", "execute (java)script(s)".

I think they're suggesting we should default to no JS anywhere by default, other than sites one whitelists JS usage on.

IOW what NoScript (and maybe uMatrix?) does.

Reply on news.ycombinator.com