3 ms·
New attack steals SSNs, e-mail addresses, and more from HTTPS pages
- zeveb 10y agoYet another JavaScript-enabled attack. Is there anyone left who is both informed and supportive of JavaScript being on by default?
- Aelinsaar 10y agoNo, but how many people out of the general computer using population do you think qualify as "well informed"? And for better or worse, how many of them are each of us related to, or otherwise in position to be a bit concerned about?
- zeveb 10y ago> No, but how many people out of the general computer using population do you think qualify as "well informed"? Very, very few.
- Nadya 10y agoThe concerning part of this is that it can be ad-injected. Anything malicious directly hosted is a concern of course, but if a site is hosting something malicious there are more attack vectors than just Javascript. Being able to attack via Ads mean a site that you should be able to trust cannot be trusted. The "informed" know this and block ads, but really this is just the 1001th nail in the coffin for allowing 3rd party ads for any reason. It's a security concern - not even a "I dislike seeing ads" concern.