News for hackers. Stuff that matters.
Re:Polyfill supply chain attack hits 100K+ sites by ChrisMarshallNY on Wednesday June 26, 2024 @11:24AM (#40801107)
That argument doesn't seem to be aging well.

I'd say that good [emphasis on "good"] coders can write very secure code. There's fundamental stuff, like encryption algos, that should be sourced from common (well-known and trusted) sources, but when we load in 100K of JS, so we can animate a disclosure triangle, I think it might not be a bad time to consider learning to do that, ourselves.

Re:Polyfill supply chain attack hits 100K+ sites by vikramkr on Wednesday June 26, 2024 @04:14PM (#40804140)
It's impossible to tell how that argument is aging since we don't have the counterfactual.