feddit.org

1,474 readers
517 users here now

Matrix Raum
Matrix Space

Static Badge

Wir sind eine deutsch- und englischsprachige Lemmy Community und entwickelten uns aus feddit.de heraus.

Feddit.org dient als Reddit-Alternative im Fediverse.

Wir sehen uns als einen selbstbestimmten Raum, außerhalb der Kontrolle kommerzieller Tech-Unternehmen.

Netiquette wird vorausgesetzt. Gepflegt wird ein respektvoller Umgang - ohne Hass, Hetze, Diskriminierung.

Alternative Oberflächen:

Werden euch Posts/Kommentare nicht angezeigt?

Diese Community ist spendenfinanziert und wird von der Fediverse Foundation unterstützt.

Serverregeln

Wir tolerieren kein diskriminierendes Verhalten und keine Inhalte, die die Unterdrückung von Mitgliedern marginalisierter Gruppen fördern oder befürworten. Diese Gruppen können durch eine der folgenden Eigenschaften gekennzeichnet sein (obwohl diese Liste natürlich unvollständig ist):

  • ethnische Zugehörigkeit
  • Geschlechtsidentität oder Ausdruck
  • sexuelle Identität oder Ausdruck
  • körperliche Merkmale oder Alter
  • Behinderung oder Krankheit
  • Nationalität, Wohnsitz, Staatsbürgerschaft
  • Reichtum oder Bildung
  • Religionszugehörigkeit, Agnostizismus oder Atheismus

Wir tolerieren kein bedrohliches Verhalten, Stalking und Doxxing. Wir tolerieren keine Belästigungen, einschließlich Brigading, Dogpiling oder jede andere Form des Kontakts mit einem Benutzer, der erklärt hat, dass er nicht kontaktiert werden möchte.

  • Sei respektvoll. Alle sind hier willkommen.
  • Kein Rassismus, Sexismus, Ableismus, Homophobie, oder anderweitige Xenophobie
  • Wir tolerieren kein Mobbing, einschließlich Beschimpfungen, absichtliches Misgendering oder Deadnaming.
  • Wir dulden keine gewalttätige nationalistische Propaganda, Nazisymbolik oder die Förderung der Ideologie des Nationalsozialismus.
  • Aktionen, die diese Instanz oder ihre Leistung beschädigen sollen, können zur sofortigen Sperrung des Kontos führen.
  • Provokationen können nach Ermessen der Moderation entfernt werden
  • Toxisches Verhalten wird nicht geduldet
  • Keine Werbung
  • Kein Spam
  • Keine Pornografie / Adult Content
  • In Deutschland, Österreich oder Schweiz illegale Inhalte werden gelöscht und können zur sofortigen Sperrung des Accounts führen.

AttributionThis text was partly adapted and modified from chaos.social. It is free to be adapted and remixed under the terms of the CC-BY (Attribution 4.0 International) license.

 
Datenschutzerklärung

TOM


Matrix Room
Matrix Space

We are a German and English-speaking Lemmy community that evolved from feddit.de.

Feddit.org serves as a Reddit alternative in the Fediverse.

We see ourselves as a self-determined space, outside the control of commercial tech companies.

Netiquette is expected. A respectful interaction is maintained - without hate, harassment, discrimination.

Alternative UIs:

Are you missing posts/comments?

Serverrules

We do not tolerate discriminatory behavior or content that promotes or advocates the oppression of members of marginalized groups. These groups may be characterized by any of the following (though this list is of course incomplete):

  • ethnicity
  • gender identity or expression
  • sexual identity or expression
  • physical characteristics or age
  • disability or illness
  • nationality, residency, citizenship
  • wealth or education
  • religious affiliation, agnosticism, or atheism

We do not tolerate threatening behavior, stalking, and doxxing. We do not tolerate harassment, including brigading, dogpiling, or any other form of contact with a user who has stated that they do not wish to be contacted.

  • Be respectful. Everyone is welcome here.
  • No racism, sexism, ableism, homophobia, or other xenophobia
  • We do not tolerate bullying, including name-calling, intentional misgendering, or deadnaming.
  • We do not tolerate violent nationalist propaganda, Nazi symbolism or the promotion of the ideology of National Socialism.
  • Actions intended to damage this instance or its performance can lead to immediate blocking of the account.
  • Provocations can be removed at the discretion of the moderators
  • Toxic behavior will not be tolerated
  • No advertising
  • No spam
  • No pornography / adult content
  • Content that is illegal in Germany, Austria or Switzerland will be deleted and can lead to an immediate ban of the account.

AttributionThis text was partly adapted and modified from chaos.social. It is free to be adapted and remixed under the terms of the CC-BY (Attribution 4.0 International) license.

 
Data-Protection-Policy

TOM

This community is powered by donations and supported by Fediverse Foundation.

Static Badge

founded 2 months ago
ADMINS
1
 
 

Archived version

Here is the report (pdf)

The supply chain attack targeting widely-used Polyfill[.]io JavaScript library is wider in scope than previously thought, with new findings from Censys showing that over 380,000 hosts are embedding a polyfill script linking to the malicious domain as of July 2, 2024.

This includes references to "https://cdn.polyfill[.]io" or "https://cdn.polyfill[.]com" in their HTTP responses, the attack surface management firm said.

"Approximately 237,700, are located within the Hetzner network (AS24940), primarily in Germany," it noted. "This is not surprising – Hetzner is a popular web hosting service, and many website developers leverage it."

Details of the attack emerged in late June 2024 when Sansec alerted that code hosted on the Polyfill domain had been modified to redirect users to adult- and gambling-themed websites. The code changes were made such that the redirections only took place at certain times of the day and only against visitors who met certain criteria.

The nefarious behavior is said to have been introduced after the domain and its associated GitHub repository were sold to a Chinese company named Funnull in February 2024.

The development has since prompted domain registrar Namecheap to suspend the domain, content delivery networks such as Cloudflare to automatically replace Polyfill links with domains leading to alternative safe mirror sites, and Google to block ads for sites embedding the domain.

2
 
 

Archived version

Here is the report (pdf)

The supply chain attack targeting widely-used Polyfill[.]io JavaScript library is wider in scope than previously thought, with new findings from Censys showing that over 380,000 hosts are embedding a polyfill script linking to the malicious domain as of July 2, 2024.

This includes references to "https://cdn.polyfill[.]io" or "https://cdn.polyfill[.]com" in their HTTP responses, the attack surface management firm said.

"Approximately 237,700, are located within the Hetzner network (AS24940), primarily in Germany," it noted. "This is not surprising – Hetzner is a popular web hosting service, and many website developers leverage it."

Details of the attack emerged in late June 2024 when Sansec alerted that code hosted on the Polyfill domain had been modified to redirect users to adult- and gambling-themed websites. The code changes were made such that the redirections only took place at certain times of the day and only against visitors who met certain criteria.

The nefarious behavior is said to have been introduced after the domain and its associated GitHub repository were sold to a Chinese company named Funnull in February 2024.

The development has since prompted domain registrar Namecheap to suspend the domain, content delivery networks such as Cloudflare to automatically replace Polyfill links with domains leading to alternative safe mirror sites, and Google to block ads for sites embedding the domain.

[Edit typo.]

view more: next ›