Many many years ago, when I first saw web pages load remote content I thought "not a good idea, that'll hurt one day".
For years now, we've come to know the danger as "supply chain attack"
It remains a bad idea.
https://stackdiary.com/polyfill-compromise-hits-100000-sites-in-a-supply-chain-attack/
#2020hindsight
JP Mens /
npub1gs…aju3v
2024-06-26 09:30:49
Author Public Key
npub1gss7d7840hekue3lrfzksdzpjmnpaf3wh9pq8jwq9kpmevltn3nq8aju3vPublished at
2024-06-26 09:30:49Event JSON
{
"id": "11672f5256fd2c7438a638f5c9d34a54a443a6884780d9b29c7d1f6b4726e1f7",
"pubkey": "4421e6f8f57df36e663f1a4568344196e61ea62eb94203c9c02d83bcb3eb9c66",
"created_at": 1719394249,
"kind": 1,
"tags": [
[
"t",
"2020hindsight"
],
[
"proxy",
"https://mastodon.social/users/jpmens/statuses/112682221535848968",
"activitypub"
]
],
"content": "Many many years ago, when I first saw web pages load remote content I thought \"not a good idea, that'll hurt one day\".\n\nFor years now, we've come to know the danger as \"supply chain attack\"\n\nIt remains a bad idea. \n\nhttps://stackdiary.com/polyfill-compromise-hits-100000-sites-in-a-supply-chain-attack/\n\n#2020hindsight",
"sig": "c6f6cbb01b648a44fe0d85b864d299f80d3468cdfaf6ae1f3167b51d191e803528c004157cfc614951cead20a1bf533f01a8de8c3ab370755f5908e8ff3bbe74"
}