101–110 of 288 posts
Where is the Chrome extension to block this?
[1] https://chrome.google.com/webstore/detail/https-everywhere/g...
[2] http://security.stackexchange.com/questions/8145/does-https-...
Earlier quoted context omitted.
Email? Text?
That could work, but I'm guessing often this might not be the account owner (kids?) racking up the bandwidth.
Wonder how the folks back at Comcast HQ would feel if the rest of the internet started adding messages to their web browsing telling them this kind of thing is unsatisfactory? Hey, this content injection game is a game that we all can play. This is the old "windows alert" nonsense. Everybody and their brother that touched the windows system thought the user would want a popup when their program did something. So the…
inject.ly isn't registered (yet) so let's presume some enterprising HN reader uses that.
As a web dev, all I need to do is and it will detect this (and any future variant) ISP injected content.
Extra points for someone implementing this to have it optionally make a JS call to another function or inject a customisable HTML widget on the page.
Earlier quoted context omitted.
They're all over the place. People just starting out. It could've been an intern fresh out of college. It could've been someone who just never graduated beyond copy-and-paste-from-StackOverflow. It could've been written by a person who never did web development before and was just told to make it work. The little HN/Twitter/Reddit "awesome programmer" bubble is just that... a bubble. It's easy for us to forget that l…
>They're all over the place. People just starting out. It could've been an intern fresh out of college. It could've been someone who just never graduated beyond copy-and-paste-from-StackOverflow. It could've been written by a person who never did web development before and was just told to make it work. I'm an intern, just moving past S.O. copy-pasta jobs and generally get scared at what the hacker news crowd might s…
Earlier quoted context omitted.
I wouldn't be so sure. They're barely even checking what browser you're running.
if they weren't then all JS and CSS files loaded through them would have their script tags in it. i have had these types of issues a while back at coffee shops that try to inject ads, it was breaking my XML.
Earlier quoted context omitted.
They're all over the place. People just starting out. It could've been an intern fresh out of college. It could've been someone who just never graduated beyond copy-and-paste-from-StackOverflow. It could've been written by a person who never did web development before and was just told to make it work. The little HN/Twitter/Reddit "awesome programmer" bubble is just that... a bubble. It's easy for us to forget that l…
>They're all over the place. People just starting out. It could've been an intern fresh out of college. It could've been someone who just never graduated beyond copy-and-paste-from-StackOverflow. It could've been written by a person who never did web development before and was just told to make it work. I'm an intern, just moving past S.O. copy-pasta jobs and generally get scared at what the hacker news crowd might s…
One thing I can say is don't use exec[1] if you can avoid it:
$string = 'rm /var/www/Giftest/*.gif';
exec($string);
[1] https://github.com/Machtap/GiffyTube/blob/master/download.ph...
[2] http://php.net/manual/en/function.unlink.php
OMG LOL. Have they never heard about jQuery? Christ, they could have made the code so much more elegant.
I'm getting a lot of requests on our servers for "/e8f6b078-0f35-11de-85c5-efc5ef23aa1f/aupm/notify.do" so I can confirm this is in production. I can also confirm they suck at JS.
How about creating /e8f6b078-0f35-11de-85c5-efc5ef23aa1f/aupm/notify.do on your server to notify Comcast users about what their internet service provider is doing? If people started doing that en masse it could bring attention to the problem and with enough publicity get Comcast to reconsider JS injection. I don't really understand the point of this, either. Couldn't they starting redirecting users to a static page s…
Wonder how the folks back at Comcast HQ would feel if the rest of the internet started adding messages to their web browsing telling them this kind of thing is unsatisfactory? Hey, this content injection game is a game that we all can play. This is the old "windows alert" nonsense. Everybody and their brother that touched the windows system thought the user would want a popup when their program did something. So the…
Interestingly it would be easy to write some code that detected THIS code. Get web developers to add it to their sites and make it show a message that comcast are charging them for traffic they're causing. And then link to the class action. inject.ly isn't registered (yet) so let's presume some enterprising HN reader uses that. As a web dev, all I need to do is and it will detect this (and any future variant) ISP inj…
Isn't JS injection a copyright violation, since it creates a derived work? Or has that idea been shot down before?
This remains an untested field of copyright law, as far as I know. I've been waiting for literally over a decade for some test case on this matter to come up, and it never does. Perhaps by 2023.
1) building a webpage where you own the copright
2) Have someone in one of the cities where this is happening browse to your page.
3) Copyright violated, and you get to be the test case!