Wow. I wonder how many vulns like this are unknown outside of identity broker co's and gov intel orgs. Seems like new ones discovered hella lot.
Turning the WWW into an app platform was a mistake. JS allows so much fuckery.
Closing the Data Broker Loophole
Large-scale online deanonymization with LLMs
Moving and keeping home addy private?
Is it possible to see only new post replies?
Car (lack of) privacy, and what to do about it. Let's talk about this?
Lauren Haney, "Right Hand of Amon" etc? Good?
That's my exp too. Esp with the endless pop-overs like "We share your data with our 5 million partners! Unless you dig through 45 pages of opt out checkmarks, b/c fuck you". 95% of the time, disallow JS bypasses those.
Also tho, some important sites flat don't work with js disabled. I hate that. I get it. There are some things where js is necessary. But it's like 2% good things plus 98% fuckery.