Hacker News

points by Catloafdev 1 day ago | 0 comments

They aren't saying "analytics script = infection"

I'm not sure what point you're trying to make here.

How about "Using third party analytics scripts is a bad idea in general, because they can and frequently do have vulnerabilities and your trust in $BigCompany is misplaced"?

I would agree with that.

[–] jeremyjh 4 hours ago

Exactly. This is what website operators need to learn. People generally don't learn lessons like this without experiencing some pain first, so in my mind skipping straight to the blocklist is the most efficient.

[–] sublinear 3 hours ago

You need to look up what a supply chain attack actually is.

This is not necessarily malicious behavior nor incompetence, unless you consider putting ads on a website incompetence. This problem has been festering for well over a decade.