Is this save once more because it moved back to Cloudflare? ;; QUESTION SECTION:... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

fweimer on June 26, 2024 | parent | context | favorite | on: Polyfill supply chain attack hits 100K+ sites

Is this save once more because it moved back to Cloudflare?

    ;; QUESTION SECTION:
    ;cdn.polyfill.io.  IN A
    
    ;; ANSWER SECTION:
    cdn.polyfill.io. 553 IN CNAME cdn.polyfill.io.cdn.cloudflare.net.
    cdn.polyfill.io.cdn.cloudflare.net. 253 IN A 172.67.209.56
    cdn.polyfill.io.cdn.cloudflare.net. 253 IN A 104.21.23.55

Or is Cloudflare warning about this and hosting the attack site?

samuelb on June 26, 2024 [–]

It is still not safe. The new owner is using Cloudflare as a CDN to appear more legitimate, but the responses are still fully controlled by the malicious backend. This has been the case since the end of February.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact