Information Management Today

Search:

DAY

WEEK

MONTH

YEAR

Select your country:
Sign up | Log in

the-javascript-supply-chain-paradox-sri-csp-and-trust-in-third-party-libraries

I Now Own the Coinhive Domain. Here's How I'm Fighting Cryptojacking and Doing Good Things with Content Security Policies.

Troy Hunt

MARCH 31, 2021

However, it's now owned by me and it's just sitting there doing pretty much nothing other than serving a little bit of JavaScript. I'll come back to that shortly, let's return to the business model of Coinhive: So, instead of serving ads you put a JavaScript based cryptominer on your victi. You know how people don't like ads?

Security

Security Mining Paper Libraries

The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

Troy Hunt

FEBRUARY 11, 2018

One of their developers embedded this code in the campaign's donation website: <script src="[link] type="text/javascript></script> See the problem? One of their developers embedded this code in the campaign's donation website: <script src="[link] type="text/javascript></script> See the problem?

Libraries

Libraries Risk Government IT

I Now Own the Coinhive Domain. Here's How I'm Fighting Cryptojacking and Doing Good Things with Content Security Policies.

The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party Libraries

Stay Connected