Re:We Know 15,579 Websites Are Infected. How Do We Tell Them?
by wakaru44 on Saturday November 07, 2026 @03:15AM
(#50402673)
I think this has become much more expensive these days. We do it, at a significant computational cost.
Not with a small hobbyist machine, but a beefy hobbyist machine. Sometimes making the hubby a bit less worthy...
Re:We Know 15,579 Websites Are Infected. How Do We Tell Them?
by CoastalCoder on Saturday November 07, 2026 @08:22PM
(#50409679)
> Sometimes making the hubby a bit less worthy...
You may want to meet with a marriage counselor.
Re:We Know 15,579 Websites Are Infected. How Do We Tell Them?
by Aachen on Saturday November 07, 2026 @07:28PM
(#50409403)
Thanks. I've considered scanning but besides that it gives a false sense of security (it's trivial to make something for which there's not already known signatures), github and other file hosting sites don't do this either. Some do, I think Google Drive does it after the fact, but it doesn't seem to be the deciding factor in whether vigilantes try to take your site down or instead report malicious content
Re:We Know 15,579 Websites Are Infected. How Do We Tell Them?
by Projectiboga on Sunday November 08, 2026 @07:15PM
(#50419262)
Maybe scan every time it is accessed as well? So if and when a malicious file hits the lists maybe your antivirus can flag it? This is an amateur question for the discussion not advice.
Running anti-virus scanners immediately on uploaded files was a widespread practice in the BBS Era, adopted in response to the same kind of abuse. FTP sites did it, too. There was usually a delay for (run on a schedule) virus scanning between uploading to one of the shareware FTP sites and the file getting out of the upload directory and into the download areas.
The headlined article isn't really about hosting user-uploaded files, though. In no sensible system do user-uploaded files go straight into the site's own published JavaScript. The headlined situation is not analogous either to you or to BBSes, involving script hyperlinks to defunct third parties in one form of the problem, so what to do when it comes bad uploads from users is really going off on a tangent from Scott Helme's actual question.