Comment

Comment on why host your own files when someone else can do it for you

aes@lemm.ee ⁨1⁩ ⁨year⁩ ago

You download a copy of a photo I took on your computer.

I have a website that lets people see the photo, it’s a popular website

Except that photo on my website doesn’t point to a copy of that photo on one of my computers, it points to the copy on yours.

Millions of people visit my website, and each time they do, they download your copy of my photo.

Uploading that photo to millions of computers across the world fucks up your internet service.

Sort:hotnew top

Aceticon@lemmy.world ⁨1⁩ ⁨year⁩ ago
Lets go a little beyond merelly hinting at the security implications:

The files being hosted by that 3rd party are Javascript, which is code that runs on the browser.

Barclays is a bank.

So people go to the website of a bank and their browser receives code from a 3rd party with whom the bank has no contract and who have nothing in place to obbey the level of security that is required by a banking site.

Consider the implications of getting the Barclays website to serve (from the point of view of a user) what can easilly be malware…
source
- aes@lemm.ee ⁨1⁩ ⁨year⁩ ago
  Fair, although explaining XSS to someone who doesn’t know what Javascript is sounds like information overload
  
  source