Comment on The new Chinese owner of the popular Polyfill JS project injects malware into more than 100 thousand sites

• Warl0k3@lemmy.world ⁨6⁩ ⁨months⁩ ago

  I don’t think we have to choose. “Maintain your websites so you don’t get taken advantage of”, and “Here’s an example of a major-world-power-affiliated group exploting that thing you didn’t do” are both pretty important stories.

  source
• breakingcups@lemmy.world ⁨6⁩ ⁨months⁩ ago

  I mean, both are true? It’s not a manipulative headline in my opinion.

  source
• themurphy@lemmy.ml ⁨6⁩ ⁨months⁩ ago

  The malware thing still deserves a headline. They just argue it’s stupid so many even have to use the library to begin with.

  source

  • KairuByte@lemmy.dbzer0.com ⁨6⁩ ⁨months⁩ ago

    Have to use? No one has to use any library. It’s convenience, and in this case it’s literally so they don’t have to write code for older browser versions.

    The issue here isn’t that anyone has to use it, it’s the way it was used that is the problem. Directly linking to the current version of the code hosted by a third party instead of hosting a copy yourself.

    source
• catloaf@lemm.ee ⁨6⁩ ⁨months⁩ ago

  Probably at your local asian gay bar.

  source