50 ms·
Injecting JavaScript into someone's pages for "security" sounds like one of the very worst ways to go about improving security. I'm surprised I haven't heard o
by Natsu 9y ago
Injecting JavaScript into someone's pages for "security" sounds like one of the very worst ways to go about improving security. I'm surprised I haven't heard of that injection being hacked to do very bad things yet.
- Torn 9y agoIf you can MITM the connection, you can just do it server-side, which is far more insidious. This was done in the UK + Brazil a few years back -- some ISPs (including British Telecom) trialled it without even telling affected customers that they were being snooped on! https://www.telegraph.co.uk/technology/news/8438461/BT-and-Phorm-how-an-online-privacy-scandal-unfolded.html https://www.telegraph.co.uk/technology/news/8438461/BT-and-P... https://phonecallsuk.co.uk/bt-webwise.html https://phonecallsuk.co.uk/bt-webwise.html
- Arnt 9y agohttp://toroid.org/vodafone-smtp-mitm http://toroid.org/vodafone-smtp-mitm too.