Hacker News

points by phyzome 1 day ago | 0 comments

Yeah, this is probably the right answer. Immediately protects users, and website owners would quickly find out as well. :-)

Primary obligation is to the users, not the owners of websites that got themselves infected.

[–] bragr 1 day ago

Unfortunately, this is how I found out 10 years ago when someone hacked a 3rd party dependency I was using on my site.

[–] baby_souffle 1 day ago

> Unfortunately, this is how I found out 10 years ago when someone hacked a 3rd party dependency I was using on my site.

Better than a customer telling you they got a nasty bug from your site!

[–] mnahkies 1 day ago

Worst one I had was about 12 years ago when I got a phone call from the local golf club I'd set-up a site/CMS for, not kept patched as well as I should've, and a club member reported they were served porn ads instead of the Saturday draw... That was a lesson learnt