News for hackers. Stuff that matters.

A comment on CircleCI trusts 8 analytics companies with your source code and API tokens. Parent comment

Re:CircleCI trusts 8 analytics companies with your source co... by 45h34jh53k4j on Tuesday October 10, 2017 @02:22PM (#15444095)
This is a world where internet banking and healthcare, arguably the canonical 'highly-sensitive applications', are using 3rd party js services like this. I think we need to redefine 'reasonable' as the industry clearly isn't acting reasonably (IMHO).
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by xorcist on Tuesday October 10, 2017 @03:44PM (#15444779)
There is no reason to accept that your bank runs javascript from third parties. Complain and use only in an environment where you can block them. While it may seem futile to report these transgressions to big institutions, the fact that your complaints are logged helps those fighting these stupidities from the inside.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by avip on Tuesday October 10, 2017 @03:44PM (#15444781)
The overwhelming majority of online financial services would self-host everything. It's not strictly a PCI-DSS compliance requirement, but it is common sense and industry standard.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by zAy0LfpBZLC8mAC on Tuesday October 10, 2017 @11:06PM (#15447008)
You wish!
[ Parent | on HN ]