Net Neutrality, right? It doesn't matter what the page does, it only matters that you are allowed to visit any page on "The Inter-Web" that you like, right?
Safari has "tab paused/reloaded due to high power consumption" (good), Chrome has "auto-mute tabs" extension (which I have turned on), I have "tab suspender" extension installed.
Basically, I'm trying to be a responsible consumer:
- this tab would like access to your hard drive files
- this tab would like access to your video camera
- this tab would like access to your microphone
- this tab would like to play sounds
- this tab would like to download more than 5mb of data
- this tab would like animation/movement
- this tab would like to use your CPU a lot
- this tab appears to be using a lot of your battery
- this tab would like to use your GPU (at all)
- this tab would like to maintain state > 24hr
the_internet.js is actually potentially really hostile (suck 9999mb at full speed, ddos@1.2.3.4, while(1){alert(1)}, mine_bitcoin( $hacker_wallet )), and I am much in favor of treating it as untrusted by default (low access, limited # of cpu cycles) until "trusted" (ie: android permissions swap: i give you the executable, you give me the permissions).
YouTube? Yes to whatever they ask.
ShadyWebsite.1234.some-random-domain.ru? You can d/l 300kb and can't do anything else (ie: web 1.0/no-script).
While each "tab" in a web-browser attempts to provide "safe" access to the computer resources, it is still not "permitted" access to computer resources. Whatever the browser defines as "safe" is 100% ok, which has to work equally well for WASM-unreal-tech-demo-castle as well as cnn.com.
I'd prefer cnn.com only had 300kb download, no external domains, no sound, no battery, no cpu, etc.
As I _trust_ cnn.com more (to the same level as youtube), I would then permit sound by default, permit large downloads, permit gpu, permit animation/video/etc.
Safari has "tab paused/reloaded due to high power consumption" (good), Chrome has "auto-mute tabs" extension (which I have turned on), I have "tab suspender" extension installed.
Basically, I'm trying to be a responsible consumer:
- this tab would like access to your hard drive files
- this tab would like access to your video camera
- this tab would like access to your microphone
- this tab would like to play sounds
- this tab would like to download more than 5mb of data
- this tab would like animation/movement
- this tab would like to use your CPU a lot
- this tab appears to be using a lot of your battery
- this tab would like to use your GPU (at all)
- this tab would like to maintain state > 24hr
the_internet.js is actually potentially really hostile (suck 9999mb at full speed, ddos@1.2.3.4, while(1){alert(1)}, mine_bitcoin( $hacker_wallet )), and I am much in favor of treating it as untrusted by default (low access, limited # of cpu cycles) until "trusted" (ie: android permissions swap: i give you the executable, you give me the permissions).
YouTube? Yes to whatever they ask.
ShadyWebsite.1234.some-random-domain.ru? You can d/l 300kb and can't do anything else (ie: web 1.0/no-script).
While each "tab" in a web-browser attempts to provide "safe" access to the computer resources, it is still not "permitted" access to computer resources. Whatever the browser defines as "safe" is 100% ok, which has to work equally well for WASM-unreal-tech-demo-castle as well as cnn.com.
I'd prefer cnn.com only had 300kb download, no external domains, no sound, no battery, no cpu, etc.
As I _trust_ cnn.com more (to the same level as youtube), I would then permit sound by default, permit large downloads, permit gpu, permit animation/video/etc.