Bypassing Browser Security Warnings with Pseudo Password Fields

Re:Bypassing Browser Security Warnings with Pseudo Password ... by rwbcxrz on Thursday November 02, 2017 @10:31AM (#15610713)

I used to have internet from Cox Communications. One day when I was working from home, I was surprised to see a page in my local dev environment load with an overlay telling me my ISP thinks I have a Windows virus (I didn't own any Windows machines at the time).

Turns out our dev environment didn't force CDN assets to load over HTTPS, so my ISP injected some JS into a library we were loading.

I tweeted at them, and they not only verified that it came from them, but also that they consider hijacking and modifying my traffic to be a service.

[ Parent | on HN ]

Re:Bypassing Browser Security Warnings with Pseudo Password ... by zackboe on Thursday November 02, 2017 @01:39PM (#15612466)

"With respect to your complaint that Cox intercepts and injects our own data in order to display alerts, etc, we note that browser alerts are a method Cox utilizes to bring customers’ attention to important information that may affect their Internet experience."

They'll also appear if you're nearing your data allowance or if their email service (that you probably don't use) is undergoing maintenance. When I last asked, there is no possible way to opt-out or disable these.

[ Parent | on HN ]