News for hackers. Stuff that matters.

A comment on Protecting sites from Cryptojacking with CSP and SRI. Parent comment

Re:Protecting sites from Cryptojacking with CSP and SRI by cbr on Sunday February 11, 2018 @08:08PM (#16355815)
Most sites are built on lots of unaudited untested (by them) third party code sever side. Adding some client side isn't great, but also isn't a fundamental change to the dynamic.

(I used to make web server software)

[ Parent | on HN ]
Re:Protecting sites from Cryptojacking with CSP and SRI by greglindahl on Sunday February 11, 2018 @10:39PM (#16356354)
Uh, so that's terrible added to terrible, but it doesn't really address what I just said!

If I was the mean person at IBM that buys startups and makes them "right", it's a lot more work to fix terrible added to terrible than plain terrible. And my last startup got bought by IBM, so I've experienced that pain personally.

[ Parent | on HN ]