Web Security

Web Security

content injection review by Andre Amorim

“Content injection is when someone adds data or code to your communications with an #HTTP web page. For example, it’s how GCHQ and NSA took over a Belgian ISP’s computers. Content injection is also how China took down GitHub with a massive DDoS attack, dubbed “The Great Cannon”. Content injection is also becoming popular with ISPs. Verizon injected tracking headers into every request made by their customers. And Comcast injects pop-ups into sites where they don’t belong. All of these attacks can be stopped by #HTTPS, provided it is implemented and made default on enough sites.”

#HTTPS #GooglePlusKnowledge

Originally shared by Andre Amorim

Content injection is when someone adds data or code to your communications with an #HTTP web page. For example, it’s how GCHQ and NSA took over a Belgian ISP’s computers. Content injection is also how China took down GitHub with a massive DDoS attack, dubbed “The Great Cannon”. Content injection is also becoming popular with ISPs. Verizon injected tracking headers into every request made by their customers. And Comcast injects pop-ups into sites where they don’t belong. All of these attacks can be stopped by #HTTPS, provided it is implemented and made default on enough sites.

https://www.eff.org/encrypt-the-web

https://www.eff.org/encrypt-the-web