Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

Re:Polymarket 1h halt after vendor compromise; affected user... by himata4113 on Friday October 30, 2026 @01:33PM (#50307309)

usually scripts have versions, this protects you from compromised cdns as well where you publish assets in a different location compared to where your frontend is served.

If a library serves a script and your site manages user funds you should probably avoid using it or use a cdn that does.

I am not quite sure, but there's also other integrity mechanisms that gurantee that a file was signed by the library developer via a served header with the signature of the file.

[ Parent | on HN ]

Re:Polymarket 1h halt after vendor compromise; affected user... by youngtaff on Saturday October 31, 2026 @05:58AM (#50314540)

Why would you even load a library script from a third-party when hosting it yourself is more performant and more secure?

[ Parent | on HN ]

Re:Polymarket 1h halt after vendor compromise; affected user... by himata4113 on Saturday October 31, 2026 @07:39AM (#50315124)

There's a lot of very weird websites. You still benefit from checksumming your own assets to prevent cache poisoning and so on.

[ Parent | on HN ]