News for hackers. Stuff that matters.

A comment on Phrack Magazine. Parent comment

Re:Phrack Magazine by giantrobot on Sunday August 27, 2023 @02:44PM (#37285457)
Holy shit man, ISPs are notorious for injecting ads and other garbage into web pages. Back when I had Comcast (Xfinity) they'd inject giant pop-up windows in web pages served over HTTP if I was approaching the asinine bandwidth limits. I also noticed an uptick in tracking ads on pages served over HTTP.

Your ISP and mobile carriers are not trustworthy neutral carriers of data. Encrypted transports are the only way for end users to avoid their snooping and injection.

[ Parent | on HN ]
Re:Phrack Magazine by reaperducer on Sunday August 27, 2023 @05:18PM (#37286736)
Have fun injecting pop-ups and JavaScript crap into my Lynx sessions. Which is where nearly all of my HTTP browsing happens.
[ Parent | on HN ]
Re:Phrack Magazine by anonym29 on Sunday August 27, 2023 @06:14PM (#37287140)
Fine and well until someone injects code to exploit some 0day in lynx. Correct me if I'm wrong, but lynx doesn't even have sandboxing the way Chrome & FF do, right? Sure, it's a much smaller attack surface than those presented by traditional browsers, but if I had to hazard a guess, I'd assume it's been far less targeted, and considerably less hardened over the years.

Note: this is NOT an endorsement of Chrome, FF, Webkit, Blink, Gecko, nor is it a suggestion to NOT use Lynx - just a reminder that there are no silver bullets in security.

[ Parent | on HN ]
Re:Phrack Magazine by giantrobot on Monday August 28, 2023 @04:44AM (#37291405)
So you use lynx so therefore MITM injection isn't a problem? I'm having trouble even imagining this is a good faith response because it is so painfully obtuse.
[ Parent | on HN ]