3 ms·
I've seen this on Twitter all day. My guess is that they wanted recaptcha, but serving the resources themselves. The easiest route was probably to reverse proxy
by Aissen 7y ago
I've seen this on Twitter all day. My guess is that they wanted recaptcha, but serving the resources themselves. The easiest route was probably to reverse proxy google.com, which is what recaptcha is hosted on:
https://developers.google.com/recaptcha/docs/v3#frontend_integration https://developers.google.com/recaptcha/docs/v3#frontend_int...
- ehsankia 7y agoCould this backfire in any way and create some sort of exploit on nsa.gov? What if someone happened to somehow have access to google.com?
- skizm 7y agoHow has no one used this for ads yet? You could make any third party site appear as a first party site. As blockers usually aren’t set up to block first party ads.