News for hackers. Stuff that matters.
Re:SELinux is unmanageable; just turn it off if it gets in y... by vermilingua on Wednesday April 27, 2022 @01:23AM (#31176622)
Is there anything on the site that needs to be secured with TLS? There's no authentication, no user details, why would it need to be secured?
Re:SELinux is unmanageable; just turn it off if it gets in y... by withinrafael on Wednesday April 27, 2022 @01:30AM (#31176660)
Someone in the middle could teach you a variant of the material in hopes of creating more insecure servers out there. Or perhaps link to an "official companion app|pdf|exe" on the page.
Re:SELinux is unmanageable; just turn it off if it gets in y... by d2wa on Wednesday April 27, 2022 @03:42AM (#31177366)
Or more likely: insert a cryptocoin miner script or ads.
Re:SELinux is unmanageable; just turn it off if it gets in y... by deniska on Wednesday April 27, 2022 @01:28AM (#31176644)
So that your ISP, or someone else along the way, doesn't put a cryptocurrency miner into the page source.
Re:SELinux is unmanageable; just turn it off if it gets in y... by stevenhuang on Wednesday April 27, 2022 @01:34AM (#31176684)
Using HTTP leaves you open to being mitm'd, for one.