yeah, and javascript was NEVER dangerous before. like it never would steal your passwords or exploit bugs in the monstrosity called a webbrowser. or ave bugs in the jit. all was perfectly safe until now :-) we can perfectly trust the dozens of megabytes injected from whoever pays the advertisement delivery network. 3d ads that is, because gpu drivers are bugfree.
i can't wait for javacript crypto implementations that will totally be free of timing side channels... -- cinap