News for hackers. Stuff that matters.
Re:Sexual abuse tip-off site could be sharing data with Face... by mavhc on Tuesday May 09, 2023 @08:37AM (#35873438)
Subresource Integrity fixes that: "hmm, must be a bug at Google's end"
Re:Sexual abuse tip-off site could be sharing data with Face... by jon-wood on Tuesday May 09, 2023 @09:09AM (#35873777)
It really doesn’t fix it, since the whole point of GTM is to allow arbitrary code execution on any page by marketing teams. (Yes, this is as bad of an idea as it sounds)
Re:Sexual abuse tip-off site could be sharing data with Face... by mavhc on Tuesday May 09, 2023 @10:52AM (#35875212)
You just don't allow GTM, citing a security and GDPR risk
Re:Sexual abuse tip-off site could be sharing data with Face... by cccbbbaaa on Tuesday May 09, 2023 @11:11AM (#35875527)
More like GDPR violation thanks to Schrems II.