3 ms·
That's correct. I work at a company in the US, and visitors to our website were giving the "Malicious Script" alert because we had Baidu analytics installed. De
by machinesofn 11y ago
That's correct. I work at a company in the US, and visitors to our website were giving the "Malicious Script" alert because we had Baidu analytics installed. Defending against this is much more nuanced than just blocking all traffic from China.
- sarciszewski 11y agoSo block the Baidu analytics CDN and call it a day?
- machinesofn 11y agoThat would work, assuming there isn't a workaround. If they were really serious about the attack, though, it's easy to imagine ways around that, especially if you add the possibility of browser caching and exploits in the injected script.
- akurtzhs 11y agoI'm curious what prompted installing Baidu analytics in the first place.