ACSC comfortable with enforcing JavaScript on site visitors

guest · Dec 5, 2019

ACSC comfortable with enforcing JavaScript on site visitors
A degraded experience for users who switched off JavaScript is one thing; blocking them is quite another
December 5, 2019
https://www.zdnet.com/article/acsc-comfortable-with-enforcing-javascript-on-site-visitors/

The Australian Cyber Security Centre (ACSC) has taken the step of blocking access to its website for regular desktop browsers that have JavaScript disabled.
If a user heads to cyber.gov.au today without JavaScript enabled, they will be handed the message, "Sorry, you need to enable JavaScript to visit this website", and no more.

After reaching out for an explanation of the situation, the ACSC told ZDNet that its use of JavaScipt was consistent with the advice in the Australian Signals Directorate's Strategies to Mitigate Cyber Security Incidents Mitigation Details document.

"Disallowing javascript [sic], except for whitelisted websites, is ideal though challenging due to the large number of websites that require such functionality for legitimate purposes, and is difficult to implement in a large scale deployment," the only paragraph mentioning JavaScript in the document states.
It would appear ACSC is not helping the ASD's ideal.
Click to expand...

"The cyber.gov.au website uses JavaScript for legitimate purposes, for features such as the 'ReportCyber' interactive application used to report cyber incidents," the ACSC also said.
Although we did not test it, the take away would seem to be that if you were deep in a concrete bunker data centre that doubled as a mobile phone reception blocker and wanted to report a cyber incident from a server, one would need to spark up a full desktop experience.
Click to expand...

Log in or Sign up

ACSC comfortable with enforcing JavaScript on site visitors

guest Guest

Log in or Sign up

ACSC comfortable with enforcing JavaScript on site visitors

guest Guest

Useful Searches