News for hackers. Stuff that matters.
Re:Show HN: Guardscript – Detect any changes made to your Ja... by dmitrygr on Monday June 24, 2019 @08:01PM (#20269826)
I get relying on 3rd party libraries, but not hosting them yourself and just hoping that the current host never gets sold/owned/etc? That sounds insane to me...

Sounds like curl | insmod /dev/stdin level insane

Re:Show HN: Guardscript – Detect any changes made to your Ja... by GhostVII on Monday June 24, 2019 @11:43PM (#20271006)
Sounds pretty insane to me too, but I think it is valuable to let people do insane things more securely, as I don't think security concerns are generally a very big deterrent in software development (unfortunately).
Re:Show HN: Guardscript – Detect any changes made to your Ja... by ben509 on Monday June 24, 2019 @08:35PM (#20270057)
Some 3rd party services, though, serve up libraries, e.g. disqus.
Re:Show HN: Guardscript – Detect any changes made to your Ja... by koolba on Monday June 24, 2019 @09:36PM (#20270407)
And those 3rd party libs can dynamically load other files via script tags. The first level does not even have to change for dynamically loaded scripts to change.
Re:Show HN: Guardscript – Detect any changes made to your Ja... by jjeaff on Tuesday June 25, 2019 @02:47AM (#20271711)
Lots of 3rd party services don't allow you to host your own copy of their library.