Content-Security-Policy: frame-ancestors 'self' X-Frame-Options: SAMEORIGIN Steve Larsen: EU TechCrunch Hosting JavaScript Exploit


EU TechCrunch Hosting JavaScript Exploit

I was browsing TechCrunch on facebook this afternoon and clicked through an article about facebook's testing of Places in the UK. I clicked on the link in facebook and was directed to as usual. After reading the first part of the article I decided to click on "Read the rest of this entry" and what happened next was a bit of a surprise.

As I was browsing in Chrome, a nice big red notification came up on the screen warning me that the site I was going to is hosting malware. I thought, this is techcrunch, it must just be a fluke. So I took my chances and proceeded anyway.

Then after just a moment, AVG confirms that indeed there is malware on the site. What is going on TechCrunch?

No comments: