News for hackers. Stuff that matters.

A comment on Protecting sites from Cryptojacking with CSP and SRI. Parent comment

Re:Protecting sites from Cryptojacking with CSP and SRI by aepc2 on Sunday February 11, 2018 @02:49PM (#16354377)
The Firefox extension decentraleyes promises to cache common libraries locally. Thus making you, your own CDN.
[ Parent | on HN ]
Re:Protecting sites from Cryptojacking with CSP and SRI by kardos on Sunday February 11, 2018 @04:43PM (#16354997)
Which, incidentally, exposes an info leak. Timing the load time for a cached script reveals if you've loaded that script before. Value low for extremely common libraries, higher for less common libraries.
[ Parent | on HN ]