4 ms·
I think you got it wrong. The Baidu analytics code is not on the pages that are on GitHub. It is all over the place, and the Great Firewall occasionally swaps i
by facepalm 12y ago
I think you got it wrong. The Baidu analytics code is not on the pages that are on GitHub. It is all over the place, and the Great Firewall occasionally swaps it out for the malicious script. There is no malicious code on the GitHub pages.
- UnoriginalGuy 12y agoYou must have misread because they never said anything like what you're claiming they said here.
- facepalm 12y agoThis is what they wrote: In short, this is how this Man-on-the-Side attack is carried out: An innocent user is browsing the internet from outside China. One website the user visits loads a javascript from a server in China, for example the Badiu Analytics script that often is used by web admins to track visitor statistics (much like Google Analytics). The web browser's request for the Baidu javascript is detected by the Chinese passive infrastructure as it enters China. A fake response is sent out from within China instead of the actual Baidu Analytics script. This fake response is a malicious javascript that tells the user's browser to continuously reload two specific pages on GitHub.com. Nowhere do they say that the script is only injected into the pages from GitHub.