News for hackers. Stuff that matters.

A comment on Polyfill supply chain attack hits 100K+ sites.

Re:Polyfill supply chain attack hits 100K+ sites by fweimer on Wednesday June 26, 2024 @11:42AM (#40801296)
Is this save once more because it moved back to Cloudflare?

    ;; QUESTION SECTION:
    ;cdn.polyfill.io.  IN A
    
    ;; ANSWER SECTION:
    cdn.polyfill.io. 553 IN CNAME cdn.polyfill.io.cdn.cloudflare.net.
    cdn.polyfill.io.cdn.cloudflare.net. 253 IN A 172.67.209.56
    cdn.polyfill.io.cdn.cloudflare.net. 253 IN A 104.21.23.55
Or is Cloudflare warning about this and hosting the attack site?
[ Parent | on HN ]
Re:Polyfill supply chain attack hits 100K+ sites by samuelb on Wednesday June 26, 2024 @12:38PM (#40801825)
It is still not safe. The new owner is using Cloudflare as a CDN to appear more legitimate, but the responses are still fully controlled by the malicious backend. This has been the case since the end of February.
[ Parent | on HN ]