Programming

17091 readers

195 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Follow the programming.dev instance rules
Keep content related to programming in some way
If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

founded 1 year ago

MODERATORS

snowe@programming.dev

Ategon@programming.dev

MaungaHikoi@lemmy.nz

Polyfill supply chain attack hits 100K+ sites (sansec.io)

submitted 3 months ago by mox@lemmy.sdf.org to c/programming@programming.dev

12 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] onlinepersona@programming.dev -4 points 3 months ago (6 children)

Opensource devs need to get paid a living wage 😩 This stuff keeps happening and somehow, I can't completely blame the devs. Thousands of sites use the product and barely anybody donates. It's not sustainable.

Anti Commercial-AI license

[–] stevedidwhat_infosec@infosec.pub 23 points 3 months ago (5 children)

This has almost nothing to do with what you’re talking about.

A Chinese company bought the domain and the service in February and are attacking people in highly specific conditions. (Mobile devices at specific times)

This is an attack. Not negligence, not an uh oh oopsie woopsie fucky wucky. Attack.

[–] sukhmel@programming.dev 8 points 3 months ago

I understood the original comment as "if devs were paid they wouldn't sell out". Which is probably valid, more or less

load more comments (4 replies)