News for hackers. Stuff that matters.

A comment on CNN, NYTimes, Mashable all vulnerable to XSS. Parent comment

Re:CNN, NYTimes, Mashable all vulnerable to XSS by dekz on Friday October 21, 2011 @08:38AM (#3139441) 

    but it would, at the same time, infect so many important and popular sites on the whole web, I can't even imagine my sites being targeted.
Maybe, or maybe it's exploited to target only your site by detecting referrers and only serving your site malicious javascript. Thomas is correct in arguing to host your own.
[ Parent | on HN ]
Re:CNN, NYTimes, Mashable all vulnerable to XSS by pestaa on Friday October 21, 2011 @09:53AM (#3139714)
This implies I can do it better than Google or any other big-name-company CDN I happen to trust.

I don't know about you or Thomas, but this isn't true for me.

[ Parent | on HN ]
Re:CNN, NYTimes, Mashable all vulnerable to XSS by tptacek on Friday October 21, 2011 @12:36PM (#3140540)
You ignored the point I'm making. You don't have a choice but to do "static file hosting" securely.
[ Parent | on HN ]