News for hackers. Stuff that matters.

A comment on Ask HN: Someone is proxy-mirroring my website, can I do anything?. Parent comment

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by sublinear on Monday December 12, 2022 @12:01PM (#33957085)
I know this is just a game that never ends, but if they're already rewriting the HTTP requests what's stopping them from rewriting the page contents in the response?

SRI is for the situation where a CDN has been poisoned, not this.

[ Parent | on HN ]
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by DoctorOW on Monday December 12, 2022 @03:04PM (#33959453)
It might not explicitly be what SRI is meant for but it'll narrow the proxy's options to:

A. Blank page

B. Let the find and replace update the CSS. Generate new hashes in the HTML.

C. Find someone new to pick on.

B is time and potentially computationally expensive, so it makes C a better option.

[ Parent | on HN ]
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by sublinear on Monday December 12, 2022 @04:34PM (#33960723)
A doesn't work because B doesn't prevent the attacker from regexing out the hash altogether and changing the domain name in the tags to their own.
[ Parent | on HN ]