Hacker News new | past | comments | ask | show | jobs | submit login
Spectrum injects JavaScript into unsecured webpages to show copyright notices (gist.github.com)
4 points by jzebedee on Oct 3, 2019 | hide | past | favorite | 1 comment



I was surprised to find a Spectrum notice tacked onto an unrelated HTTP site this morning. It looks like Spectrum are editing customer traffic to inject a DMCA notice page that loads their own unsecured scripts.

Other ISPs like Comcast have done this in the past[1], but this is the first time I've seen anything like it from Spectrum, who normally keeps their hijacking limited to ad-riddled search pages for failed DNS lookups.

I use HTTPS Everywhere[2] and rarely visit sites delivered over HTTP, so I can't say if this is happening only on unsecured pages or everywhere.

[1] "Comcast injects JavaScript into webpages to show copyright notices to customers" https://news.ycombinator.com/item?id=10592775

[2] "HTTPS Everywhere" https://www.eff.org/https-everywhere




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: