For many many years, I've thought of my infosec friends with NoScript enabled by default as hopelessly paranoid.
Today, I have NoScript enabled by default. It's actually not that painful.
Quote Tweet
There's a JavaScript POC for #Spectre. Ads frequently include JavaScript. If you're not using an ad blocker in your browser, start. Also, enable site isolation in Chrome. For the first time ever, I'm considering whether preventing all JavaScript on unknown sites is the best move.
9
58
122



