On: Abusing Your Browser: Infinitely Large Favicons

[TeMPOraL]

One thing we need to figure out: how to ban assholes instead of banning features. In general, things can be either interesting XOR safe, and we're killing off more and more interesting things[0] on the web just because some assholes will surely make use of them.

[0] - like e.g. calls for rate-limiting access to phone gyroscopes, or banning it altogether, in https://news.ycombinator.com/item?id=10914666.

[_gok2 → TeMPOraL]

I agree with you, in principle, BUT there's always a tradeoff to be had. In this case, I don't really see it.

As a typical user, I never want my favicon to be more than ~1MB. More interesting effects may be done, but can be done in javascript, for example.

[pdkl95 → TeMPOraL]

> ban assholes

Trying to enumerate badness[1] is always the wrong approach, as your list can never be complete.

[1] http://www.ranum.com/security/computer_security/editorials/d...