china
Polyfill supply chain attack hits 100K+ sites:
The
polyfill.jsis a popular open source library to support older browsers. 100K+ sites embed it using thecdn.polyfill.iodomain. Notable users are JSTOR, Intuit and World Economic Forum. However, in February this year, a Chinese company bought the domain and the Github account. Since then, this domain was caught injecting malware on mobile devices via any site that embedscdn.polyfill.io.
This is fine.
Bing is censoring Tank Man search results
Bing is censoring images of the Tiananmen Square “tank man” image. DuckDuckGo, who uses Bing’s search backend, is too.
Here’s the result of a Bing search for “tank man” with safe search on the default “moderate” setting:
Perhaps the image is too graphic and safe search is hiding the results? No. Turning safe search off gives the same answer:
At first, DuckDuckGo was returning 4 images of men next to tanks:
Shortly afterward, it was updated so that the exact same search settings didn’t return anything at all:
DuckDuckGo’s “safe search: off” results were empty from the start:
Full credit to Google here who returns a long list of images:
Shame on you, Microsoft, for censoring this important historical record.