Polyfill supply chain attack hits 100K+ sites

Re:Polyfill supply chain attack hits 100K+ sites by a2800276 on Tuesday June 25, 2024 @04:22PM (#40793149)

I'm so glad to find some sane voices here! I mean, sure, if you're really serving a lot of traffic to Mombasa, akamai will reduce latency. You could also try to avoid multi megabyte downloads for a simple page.

[ Parent | on HN ]

Re:Polyfill supply chain attack hits 100K+ sites by jsheard on Tuesday June 25, 2024 @04:34PM (#40793271)

Content: 50KB

Images: 1MB

Javascript: 35MB

Fonts: 200KB

Someone who is good at the internet please help me budget this. My bounce rate is dying.

[ Parent | on HN ]

Re:Polyfill supply chain attack hits 100K+ sites by bawolff on Tuesday June 25, 2024 @06:25PM (#40794380)

While there are lots of bad examples out there - keep in mind its not quite that straight forward as it can make a big difference whether those resources are on the critical path that blocks first paint or not.

[ Parent | on HN ]

Re:Polyfill supply chain attack hits 100K+ sites by jenadine on Tuesday June 25, 2024 @05:21PM (#40793765)

What's all that JavaScript for?

[ Parent | on HN ]

Re:Polyfill supply chain attack hits 100K+ sites by ozzcer on Tuesday June 25, 2024 @06:04PM (#40794205)

Cookie banner

[ Parent | on HN ]

Re:Polyfill supply chain attack hits 100K+ sites by josephg on Tuesday June 25, 2024 @04:52PM (#40793456)

It’s not an either or thing. Do both. Good sites are small and download locally. The CDN will work better (and be cheaper to use!) if you slim down your assets as well.

[ Parent | on HN ]