Their reason for not going into any details or provide any evidence is that it might be a government plot and they’d get into trouble for sharing it. Sounds like bullshit to me TBH. Just someone looking for attention.
Yeah, that’s why I asked in the first place. I’m zero interested in the credibility of that person. Just somebody check if it’s factual. I’m not a Javascript-person but I bet there are debugging-tools and de-minifiers available. Or just someone press Ctrl+Shift+I and look at the inspector.
Edit: Nevermind. Maybe the credibility of an account sometimes is enough.
Most JS shipping on the web is minified, with variables renamed to random names, you can’t just open it and search for maliciousFunction.
Also their claim of Twitch doing network sniffing in a browser should be impossible unless Twitch has found and is actively exploiting a security flaw in modern web browsers.
Technically, twitch could sniff all the traffic exchanged with their user. It would be pointless as they already know the content of the transmission, though
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@beehaw.org
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
“website bad, javascript bad”
“Oh, do you have any proof?”
“Just read the code! Can’t be bothered to back up my claims”
Yeah, call me when you actually care about backing up the misinformation you spout.
Until there’s evidence there’s basically no reason to treat this as news.
And, is that true?
No idea.
Their reason for not going into any details or provide any evidence is that it might be a government plot and they’d get into trouble for sharing it. Sounds like bullshit to me TBH. Just someone looking for attention.
MostlyJustBored’s account is 3 weeks old with no history. We should take whatever they say with a grain of salt.
Or we could take a look at the javascript ourselves, like they say to do?
Everyone’s asking for a writeup, but like… there’s not any other JS programmers who could take a look and verify?
Nobody wants to trust this guy, but also nobody wants to do the legwork to verify it.
Yeah, that’s why I asked in the first place. I’m zero interested in the credibility of that person. Just somebody check if it’s factual. I’m not a Javascript-person but I bet there are debugging-tools and de-minifiers available. Or just someone press Ctrl+Shift+I and look at the inspector.
Edit: Nevermind. Maybe the credibility of an account sometimes is enough.
They want the writeup, because the claims are too vague to falsify.
Most JS shipping on the web is minified, with variables renamed to random names, you can’t just open it and search for
maliciousFunction.Also their claim of Twitch doing network sniffing in a browser should be impossible unless Twitch has found and is actively exploiting a security flaw in modern web browsers.
Technically, twitch could sniff all the traffic exchanged with their user. It would be pointless as they already know the content of the transmission, though
So twitch collects analytics? What a surprise
That’s not what they meant.