Show HN: ScriptObservatory.org – How much malicious JavaScript goes unnoticed?

Post by [deleted] » Sun, Oct 18, 2015, 10:53 PM UTC

Post by [deleted] » Sun, Oct 18, 2015, 11:06 PM UTC

voltagex_ wrote: post #3

andy112 wrote: post #2

Hi all. This is a side-project I've been working on for a while now. From the FAQs page: Why is something like this a good idea? JavaScript, iframes, and other embedded web content have the potential to cause your browser to take unwanted and even harmful actions on your behalf, however visibility into what you're running as you browse is very limited. After-the-fact analysis of what you were sent is (in nearly all c…

Can you help with any analysis of http://blog.voltagex.org/2015/10/07/malvertising-on-my-stack... ? Basically, a script started displaying really intrusive ads on StackOverflow, initially only on my Nexus 5 - the only way to get rid of them was clearing the cache. It did not happen over HTTPS. A commenter thinks it might be a compromised Google Analytics script but this doesn't sound possible.