News for hackers. Stuff that matters.
Re:Polyfill supply chain attack hits 100K+ sites by triblondon on Tuesday June 25, 2024 @08:01PM (#40795107)
Hi, I'm the original author of the polyfill service. I did not own the domain name nor the GitHub account. In recent years I have not been actively involved in the project, and I'm dismayed by what's happened here. Sites using the original polyfill.io should remove it right away and use one of the alternatives or just drop it entirely - in the modern era it really isn't needed anymore.
Re:Polyfill supply chain attack hits 100K+ sites by account42 on Thursday June 27, 2024 @05:46AM (#40808850)
People should have never started including javascript from third-party domains in the first place. It was always playing with fire and there were plenty of people pointing out the risks.