4 ms·
Let's hear more about your threat model that causes you to wory about nefarious content being injected into a blog post about comments in code
by kyleee 5y ago
Let's hear more about your threat model that causes you to wory about nefarious content being injected into a blog post about comments in code
- brazzledazzle 5y agoA bit snarky but I agree, it doesn’t seem like a huge threat. I’d love to be proven wrong though.
- Gh0stRAT 5y agoNot OP, but residential ISPs were caught injecting ads into HTTP sites at least as early as 2014. [0] I certainly wouldn't trust Comcast to keep malicious ads out of their ad network, either. [0] https://www.techdirt.com/articles/20140908/07191228453/comcast-using-packet-injection-to-push-its-own-ads-via-wifi-apparently-oblivious-to-security-concerns.shtml https://www.techdirt.com/articles/20140908/07191228453/comca...
- sinsterizme 5y agoHow about not opening the gates for third parties to inject ads, trackers and crypto miners
- cpach 5y agoI agree that in this case (reading an article) HTTP is not a huge threat. But in 2021 I consider HTTPS + HSTS to be a basic hygiene factor.