#polyfillio — Public Fediverse posts on home.social

🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻♓🧿 @[email protected] · 2024-09-09 · 02:24 UTC

I realize the lesson there is; don't depend on code from domains you don't control, and in an ideal world that's what you should do

But is there still a need there? Are there #webPlatform features you'd like to use but you don't want to introduce a build process just to bundle the #polyfill from #NPM?

Or is there no point in #polyfills since #browsers don't share caches between origins these days so there's no precaching benefit anymore?

#webDev #javaScript #web

#polyfillio #webplatform #polyfill #npm #polyfills #browsers

🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻♓🧿 @[email protected] · 2024-07-11 · 01:54 UTC

So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..

Hear me out; #fleekfunctions are immutable, and transparent. So long as the #fleeknetwork nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.

#webDev #polyfillio #polyfill #supplyChain #hacking #web3 #blockchain #fleek #javaScript

#fleekfunctions #fleeknetwork #webdev #polyfillio #polyfill #supplychain

🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻♓🧿 @[email protected] · 2024-07-03 · 21:21 UTC

> #China-based company #Funnull acquired the domain and the GitHub account that hosted the #JavaScript code. On June 25, researchers from #security firm Sansec reported that code hosted on the polyfill domain had been changed to redirect users to adult- and gambling-themed websites. The code was deliberately designed to mask the redirections by performing them only at certain times of the day and only against visitors who met specific criteria.

https://arstechnica.com/security/2024/07/384000-sites-link-to-code-library-caught-performing-supply-chain-attack/

#polyfillio #supplyChain

#china #funnull #javascript #security #polyfillio #supplychain

iam-py-test :transgender_flag: :neocat_flag_lesbian: @[email protected] · 2024-06-26 · 21:21 UTC

GitHub has placed a warning on the PolyfillIO repository (https://github.com/polyfillpolyfill/polyfill-service), and has denied access for non-logged in users. The other two repositories owned by that account are unblocked. Dismissing the warning appears to be permanent for an account.

#PolyfillIo #polyfillIoAttack #GitHubSecurity

#polyfillio #polyfillioattack #githubsecurity