Re:Innovation Nation: WePay is the anti-PayPal
by bdclimber14 on Tuesday October 12, 2010 @05:06PM
(#1784970)
Don't host JS on Google? Do you mean libraries like jQuery? I'm curious because we use Google for jQuery and a few other libraries. I've never heard this to be a security issue, and I'm not entirely sure how it would be. Nonetheless, security is all about cost-benefit, it may be worth the security risk for the page load speed increase with Google.
[ Parent
| on HN ]
Re:Innovation Nation: WePay is the anti-PayPal
by modoc on Tuesday October 12, 2010 @06:00PM
(#1785143)
It's a security issue because someone can compromise google's CDN, or cache poison, or DNS poison/hijack that, and can inject malicious JS code into a large number of websites with one attack. If you're running a payment related it pays to be paranoid.