Is this save once more because it moved back to Cloudflare? ;; QUESTION SECTION:... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

fweimer 10 months ago | parent | context | favorite | on: Polyfill supply chain attack hits 100K+ sites

Is this save once more because it moved back to Cloudflare?

    ;; QUESTION SECTION:
    ;cdn.polyfill.io.  IN A
    
    ;; ANSWER SECTION:
    cdn.polyfill.io. 553 IN CNAME cdn.polyfill.io.cdn.cloudflare.net.
    cdn.polyfill.io.cdn.cloudflare.net. 253 IN A 172.67.209.56
    cdn.polyfill.io.cdn.cloudflare.net. 253 IN A 104.21.23.55

Or is Cloudflare warning about this and hosting the attack site?

samuelb 10 months ago [–]

It is still not safe. The new owner is using Cloudflare as a CDN to appear more legitimate, but the responses are still fully controlled by the malicious backend. This has been the case since the end of February.

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact