Re:Protecting sites from Cryptojacking with CSP and SRI
by greglindahl on Sunday February 11, 2018 @03:32PM
(#16354629)
That depends on what "this problem" is -- lots of people here would say that the problem is websites that depend on unaudited, untested 3rd party resources. I can tell from your other comments that you think it's safe to trust 3rd party resources from places like Google. So there's a disagreement that is worth talking about explicitly.
[ Parent
| on HN ]
Re:Protecting sites from Cryptojacking with CSP and SRI
by cbr on Sunday February 11, 2018 @08:08PM
(#16355815)
Most sites are built on lots of unaudited untested (by them) third party code sever side. Adding some client side isn't great, but also isn't a fundamental change to the dynamic.
(I used to make web server software)
Re:Protecting sites from Cryptojacking with CSP and SRI
by greglindahl on Sunday February 11, 2018 @10:39PM
(#16356354)
Uh, so that's terrible added to terrible, but it doesn't really address what I just said!
If I was the mean person at IBM that buys startups and makes them "right", it's a lot more work to fix terrible added to terrible than plain terrible. And my last startup got bought by IBM, so I've experienced that pain personally.