Protecting sites from Cryptojacking with CSP and SRI

Re:Protecting sites from Cryptojacking with CSP and SRI by sitkack on Sunday February 11, 2018 @01:24PM (#16353931)

Isn't this literally out of 'How I Steal Your Credit Card Number' playbook?

[ Parent | on HN ]

Re:Protecting sites from Cryptojacking with CSP and SRI by bluejekyll on Sunday February 11, 2018 @01:47PM (#16354066)

It’s similar. If I remember the CCN playbook correctly, it was about taking over one of your JS dependencies via npm. This is about cross hosted JS, loading remote code.

[ Parent | on HN ]

Re:Protecting sites from Cryptojacking with CSP and SRI by Scott_Helme_ on Sunday February 11, 2018 @02:12PM (#16354206)

More or less, yeah..

[ Parent | on HN ]