Hacker News new | ask | show | jobs
by immibis 980 days ago
Yes, it does. An MITM attacker can deliver malicious code to you which runs in the website context, and can exploit any bugs in your browser's javascript engine.
2 comments
philihp 980 days ago
Sounds like you have a bigger problem if your browser isn't properly sandboxed.
link
immibis 980 days ago
ISPs previously did this. Not JS exploits, but they injected ads into HTTP web pages. Really popular ISPs, on the level of Comcast.
link
nmilo 980 days ago
Sounds like FUD
link