3 ms·
Because ads are not how malware is distributed? You have higher chance of getting a malware from `pnpm add` than seeing an ad on the web.
by bitpush 1y ago
Because ads are not how malware is distributed? You have higher chance of getting a malware from `pnpm add` than seeing an ad on the web.
- BLKNSLVR 1y agohttps://en.wikipedia.org/wiki/Malvertising https://en.wikipedia.org/wiki/Malvertising
- minitech 1y ago> Because ads are not how malware is distributed? Malware is absolutely distributed through ads. In the case of more reputable ad platforms that don’t allow arbitrary scripts, it’s by linking to malware, but they’re also used to serve drive-by exploits. > You have higher chance of getting a malware from `pnpm add` than seeing an ad on the web. If you’re a normal computer user who browses the web without an ad blocker and never runs `pnpm add`, the relevant chance is a little different. (Fun side fact: current pnpm wisely doesn’t run install scripts by default.)
- vasco 1y agoAnd its users wisely read all of those scripts before manually running them, same as the library code, they read all of it before running.
- kstrauser 1y agoThis is very incorrect. Ads are basically running a program they wrote on your computer. If there’s any exploitable feature in your browser’s JS sandbox, count on someone sending you an ad that will exploit it.
- muppetman 1y ago[flagged]
- chithanh 1y agoTo add to the other reply, there were even targeted malware campaigns through ad networks. Because nowadays, you can choose who sees your ads so precisely (by IP block or geolocation) that you can target individual organizations.
- akho 1y agoI took a careful look at the definition of malware on Wikipedia. Ads are malware.
- nicce 1y agoGIMP is one of the best examples that comes to my mind: https://www.techradar.com/news/this-fake-gimp-google-ad-just-ends-up-serving-malware https://www.techradar.com/news/this-fake-gimp-google-ad-just...