Hacker News new | ask | show | jobs
by dmitrygr 2554 days ago
I get relying on 3rd party libraries, but not hosting them yourself and just hoping that the current host never gets sold/owned/etc? That sounds insane to me...

Sounds like curl | insmod /dev/stdin level insane

3 comments

Sounds pretty insane to me too, but I think it is valuable to let people do insane things more securely, as I don't think security concerns are generally a very big deterrent in software development (unfortunately).
Some 3rd party services, though, serve up libraries, e.g. disqus.
And those 3rd party libs can dynamically load other files via script tags. The first level does not even have to change for dynamically loaded scripts to change.
Lots of 3rd party services don't allow you to host your own copy of their library.