SLRPNK

1,339 readers
153 users here now

What is Solarpunk?

A SolarPunk Manifesto

Basic Rules:

be constructive: there is no need of another internet space full of competition, negativity, rage etc.;
no bigotry, including racism, sexism, ableism, transphobia, homophobia or xenophobia;
be empathic: empathy is more rebellious than a middle finger;
no porn and no gore: let's keep this place easy to manage;
no ads / spamming / flooding, we don't want to buy/consume your commodified ideas;
occasional self-promotion by active members is fine.

For any community related question or to just test some function: !meta@slrpnk.net

Try our Photon & Alexandrite frontends.

Or try our lightweight UI and Voyager mobile UI.

All accounts also work with XMPP chat automatically incl. our Movim client.

If you need to jointly brainstorm on your next Solarpunk text, try our Etherpad.

And don't miss our Wiki.

founded 2 years ago

ADMINS

The new Chinese owner of the popular Polyfill JS project injects malware into more than 100 thousand sites (sansec.io)

submitted 2 months ago by 0x815@feddit.org to c/technology@lemmy.zip

0 comments fedilink

cross-posted from: https://feddit.org/post/179744

cross-posted from: https://feddit.org/post/179692

Archived link

The polyfill.js is a popular open source library to support older browsers. 100K+ sites embed it using the cdn.polyfill.io domain. Notable users are JSTOR, Intuit and World Economic Forum. However, in February this year, a Chinese company bought the domain and the Github account. Since then, this domain was caught injecting malware on mobile devices via any site that embeds cdn.polyfill.io. Any complaints were quickly removed (archive here) from the Github repository.

The new Chinese owner of the popular Polyfill JS project injects malware into more than 100 thousand sites (sansec.io)

submitted 2 months ago by 0x815@feddit.org to c/technology@lemmy.zip

0 comments fedilink

cross-posted from: https://feddit.org/post/179692

Archived link

The polyfill.js is a popular open source library to support older browsers. 100K+ sites embed it using the cdn.polyfill.io domain. Notable users are JSTOR, Intuit and World Economic Forum. However, in February this year, a Chinese company bought the domain and the Github account. Since then, this domain was caught injecting malware on mobile devices via any site that embeds cdn.polyfill.io. Any complaints were quickly removed (archive here) from the Github repository.

908

The new Chinese owner of the popular Polyfill JS project injects malware into more than 100 thousand sites (sansec.io)

submitted 2 months ago* (last edited 2 months ago) by 0x815@feddit.org to c/technology@lemmy.world

116 comments fedilink

Archived link

The polyfill.js is a popular open source library to support older browsers. 100K+ sites embed it using the cdn.polyfill.io domain. Notable users are JSTOR, Intuit and World Economic Forum. However, in February this year, a Chinese company bought the domain and the Github account. Since then, this domain was caught injecting malware on mobile devices via any site that embeds cdn.polyfill.io. Any complaints were quickly removed (archive here) from the Github repository.

Polyfill supply chain attack hits 100K+ sites (sansec.io)

submitted 2 months ago by mox@lemmy.sdf.org to c/programming@programming.dev

12 comments fedilink