If you want to help a lot of people to avoid a supply chain attack, get cdn.polyfill.io blocked.
Write it into your uBlock Origin rules, block it in your DNS, do what you need to do.
https://sansec.io/research/polyfill-supply-chain-attack
And also watch your DNS traffic for funny domains 👀
#infosec #supplychain #security
Sheogorath /
npub1fr…a5a27
2024-06-25 20:59:23
Author Public Key
npub1frkedgrjevuxctmsfkh2c8f2rmfq8mjk9rlufuvr9ujrwwdcd48sva5a27Published at
2024-06-25 20:59:23Event JSON
{
"id": "22e61e21b7f6b9be1c9fd035a20f5f5af2e0dfb27d467cb58b2f3e0f31b313ef",
"pubkey": "48ed96a072cb386c2f704daeac1d2a1ed203ee5628ffc4f1832f243739b86d4f",
"created_at": 1719349163,
"kind": 1,
"tags": [
[
"proxy",
"https://microblog.shivering-isles.com/@sheogorath/112679266772618701",
"web"
],
[
"t",
"infosec"
],
[
"t",
"security"
],
[
"t",
"supplychain"
],
[
"proxy",
"https://microblog.shivering-isles.com/users/sheogorath/statuses/112679266772618701",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://microblog.shivering-isles.com/users/sheogorath/statuses/112679266772618701",
"pink.momostr"
],
[
"expiration",
"1721941167"
]
],
"content": "If you want to help a lot of people to avoid a supply chain attack, get cdn.polyfill.io blocked.\n\nWrite it into your uBlock Origin rules, block it in your DNS, do what you need to do.\n\nhttps://sansec.io/research/polyfill-supply-chain-attack\n\nAnd also watch your DNS traffic for funny domains 👀 \n\n#infosec #supplychain #security",
"sig": "74abd9a950c86d4e59bf7dd7a3f7c80e3ecb53593624be16ece2b2a8bc60c3692b9bfdc7f6ace594439a08b79ed97a0c69215676b2ad2420d6a859a165cc0497"
}