Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add extended polyfilio domains #24285

Merged
merged 1 commit into from
Jun 28, 2024

Conversation

SISheogorath
Copy link
Contributor

Describe the issue

According to the news article by bleepingcomputers and in line with the announcement from Google on the topic, the number of impacted CDNs by this malware campaign is even bigger.

See: https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/

This will probably break a lot of stuff. But I guess it has to break.

According to the news article by bleepingcomputers and in line with the announcement from Google on the topic, the number of impacted CDNs by this malware campaign is even bigger.

See: https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/
@vicevolf
Copy link

Is this an accurate approach? Although these CDNs have been compromised by security risks, completely blocking these commonly used CDNs in China could directly lead to abnormal or even broken loading of many websites, severely affecting user experience and forcing them to disable plugins and leave the security protection. Are there more precise filtering rules? It is necessary to balance security risks with the introduction of new problems.

||bootcdn.net^$all ||bootcss.com^$all ||staticfile.net^$all ||staticfile.org^$all

图片

@SISheogorath
Copy link
Contributor Author

Given that we have to assume that all these CDNs are operated by the same entity according to the leaked Cloudflare account credentials, and have been observed serving malware, there is probably no more precise rule to use here.

When I made the Pull Request I had similar concerns. Hence:

This will probably break a lot of stuff. But I guess it has to break.

Is the cure worse than the disease? I don't think so, uBlock origin already allows you to manage individual blocks per page, if you really want to unblock something. Otherwise its up to the broken websites to update their dependencies or use a plugin that rewrites them.

Given the amount of Chinese language involved with the operator one could even argue that their targets are probably even in China and Chinese speaking communities.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants