Protecting sites from Cryptojacking with CSP and SRI

Re:Protecting sites from Cryptojacking with CSP and SRI by neals on Sunday February 11, 2018 @12:56PM (#16353768)

This makes me wonder what happens when a popular nodejs library get used in this way. What could hackers do with thousands of compromised nodejs servers?

[ Parent | on HN ]

Re:Protecting sites from Cryptojacking with CSP and SRI by raesene9 on Sunday February 11, 2018 @03:58PM (#16354753)

yeah the complete lack of signing on npm libs + the large dependency trees that can trip you up (e.g. the leftpad problem) are only going to cause more issues as attackers move on to that as a vector.

[ Parent | on HN ]

Re:Protecting sites from Cryptojacking with CSP and SRI by gboudrias on Sunday February 11, 2018 @01:18PM (#16353898)

Nowadays it's just about getting as many miners as possible. No big mystery.

[ Parent | on HN ]

Re:Protecting sites from Cryptojacking with CSP and SRI by quickthrower2 on Sunday February 11, 2018 @05:43PM (#16355260)

Well they might do other things in to your house, now they have the keys.

[ Parent | on HN ]