3 ms·
> ... rawgit.com ... Wait, they're still serving things via rawgit? They started shutting down in 2018! That service has been deprecated for three years. That
by shakna 5y ago
> ... rawgit.com ...
Wait, they're still serving things via rawgit? They started shutting down in 2018! That service has been deprecated for three years. That sounds like an attack that is just waiting to happen.
> GitHub repositories that served content through RawGit within the last month will continue to be served until at least October of 2019. URLs for other repositories are no longer being served.
> If you're currently using RawGit, please stop using it as soon as you can.
- proactivesvcs 5y agoFire and forget mentality. Wasn't long ago that some advert video hosting site's domain was taken into new ownership to host porn. It must take a lot of effort to integrate all this third-party garbage into a site. If only a site's security was given a similar effort.
- MattGaiser 5y agoI can easily see that after 2 years there is nobody left who remembers what APIs are in the code.
- quadrifoliate 5y agoI am not surprised at all. Technical debt, periodic refactors or security analyses are very low on the list of things that get rewarded, and shiny new projects are high. That's until a security incident takes place, then people are reprimanded and things will be okay for a month or two. Until that's fixed, things like this will keep being commonplace.
- deleted 5y ago[deleted]