- cross-posted to:
- security@lemmy.ml
- cross-posted to:
- security@lemmy.ml
You know it’s serious when you’ve set up a whole new subdomain for this one big!
Thats how they supposedly do this haha
I suppose they have a very minimal webserver, hardened to the max and for sure not using docker
Oh I know it’s minimal effort to spin one up, especially for a static page. It’s just funny that that’s how this goes now.
Its not, web dev is all about running 4 different Operating systems in containers, with huge dependency chains and slow loading javascript crap
As a web developer, I’d say I feel insulted by such a wild accusation, but then I’d be lying. 😅
Plus downloading all your malicious software through unauth’d channels like npm, pip, cargo, docker hub, or github
…it doesn’t, you put static files on a CDN. Nobody in their right mind serves them from custom-made webservers (anymore). Those are intended exclusively for dynamic code (APIs for business logic, authentication, user actions, search etc.)