Shakedown Social

0 posts0 participants0 posts today

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸Y'all remember <a href="https://mastodon.social/tags/PolyfillIO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PolyfillIO</a>?I realize the lesson there is; don't depend on code from domains you don't control, and in an ideal world that's what you should doBut is there still a need there? Are there <a href="https://mastodon.social/tags/webPlatform" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webPlatform</a> features you'd like to use but you don't want to introduce a build process just to bundle the <a href="https://mastodon.social/tags/polyfill" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfill</a> from <a href="https://mastodon.social/tags/NPM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NPM</a>?Or is there no point in <a href="https://mastodon.social/tags/polyfills" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfills</a> since <a href="https://mastodon.social/tags/browsers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browsers</a> don't share caches between origins these days so there's no precaching benefit anymore?<a href="https://mastodon.social/tags/webDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webDev</a> <a href="https://mastodon.social/tags/javaScript" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#javaScript</a> <a href="https://mastodon.social/tags/web" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#web</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..Hear me out; <a href="https://mastodon.social/tags/fleekfunctions" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fleekfunctions</a> are immutable, and transparent. So long as the <a href="https://mastodon.social/tags/fleeknetwork" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fleeknetwork</a> nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.<a href="https://mastodon.social/tags/webDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webDev</a> <a href="https://mastodon.social/tags/polyfillio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfillio</a> <a href="https://mastodon.social/tags/polyfill" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfill</a> <a href="https://mastodon.social/tags/supplyChain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#supplyChain</a> <a href="https://mastodon.social/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://mastodon.social/tags/web3" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#web3</a> <a href="https://mastodon.social/tags/blockchain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blockchain</a> <a href="https://mastodon.social/tags/fleek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fleek</a> <a href="https://mastodon.social/tags/javaScript" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#javaScript</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸> <a href="https://mastodon.social/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#China</a>-based company <a href="https://mastodon.social/tags/Funnull" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Funnull</a> acquired the domain and the GitHub account that hosted the <a href="https://mastodon.social/tags/JavaScript" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JavaScript</a> code. On June 25, researchers from <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.<a href="https://arstechnica.com/security/2024/07/384000-sites-link-to-code-library-caught-performing-supply-chain-attack/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://arstechnica.com/security/2024/07/384000-sites-link-to-code-library-caught-performing-supply-chain-attack/</a><a href="https://mastodon.social/tags/polyfillio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfillio</a> <a href="https://mastodon.social/tags/supplyChain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#supplyChain</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸> The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected anywhere from 100,000 to tens of millions of websites has been traced to a common operator> Researchers discovered a public GitHub repository where the purported operators of Polyfill.io had accidentally exposed their Cloudflare secret keys.LOL, FAIL!<a href="https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/</a><a href="https://mastodon.social/tags/polyfill" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfill</a> <a href="https://mastodon.social/tags/polyfillio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfillio</a> <a href="https://mastodon.social/tags/cloudflare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudflare</a> <a href="https://mastodon.social/tags/bootcdn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bootcdn</a> <a href="https://mastodon.social/tags/bootcss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bootcss</a> <a href="https://mastodon.social/tags/staticFile" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#staticFile</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

Scripter :verified_flashing:JavaScript-Service Polyfill.io: 100.000 Sites binden Schadcode über CDN ein | heise online <a href="https://heise.de/-9778256" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://heise.de/-9778256</a> <a href="https://social.tchncs.de/tags/ContentDeliveryNetwork" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ContentDeliveryNetwork</a> <a href="https://social.tchncs.de/tags/CDN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CDN</a> <a href="https://social.tchncs.de/tags/Polyfillio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Polyfillio</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸UBlock Origin is now blocking polyfill.io Your regular reminder that AdBlockers are not just for hiding banner ads, they are also an indispensable tool for <a href="https://mastodon.social/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> and <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a><a href="https://github.com/uBlockOrigin/uAssets/commit/91dfc54aed0f0aa514c1a481c3e63ea16da94c03" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/uBlockOrigin/uAssets/commit/91dfc54aed0f0aa514c1a481c3e63ea16da94c03</a>/cc <a href="https://front-end.social/@AmeliaBR" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@AmeliaBR</a> <a href="https://mastodon.social/tags/polyfillio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfillio</a> <a href="https://mastodon.social/tags/ublock" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ublock</a> <a href="https://mastodon.social/tags/supplyChain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#supplyChain</a> <a href="https://mastodon.social/tags/polyfill" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfill</a> <a href="https://mastodon.social/tags/uBlockOrigin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#uBlockOrigin</a> <a href="https://mastodon.social/tags/adBlocker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#adBlocker</a>

Amelia Bellamy-RoydsRe the <a href="https://front-end.social/tags/polyfillio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#polyfillio</a> malware issue:I've seen a lot of people telling web developers to update any sites that use the service. But we all know there are countless unmaintained websites out there for small business and orgs.The other thing that should be done is clientside, to block access to the URL so your browser won't download the malware even if a website asks it to.Anyone got a good guide for doing that, at the individual browser or OS level? (For those without institutional firewalls.)

Recent searches

Search options

Administered by:

Server stats:

#polyfillio