Hacker News new | past | comments | ask | show | jobs | submit login
ServiceWorker's Link leads to botnet-like persistent JavaScript worker (chromium.org)
101 points by omphalos on Nov 19, 2016 | hide | past | favorite | 7 comments



You can see what service workers are registered here:

chrome://serviceworker-internals/

Frankly, I'm tempted to label the whole notion of a remote-installing auto-updating local proxy as a misguided antifeature, but I honestly don't know enough about it. What was wrong with app caching?


You mean AppCache?


Sort of. I meant caching apps, of which AppCache is an implementation.


It's not dynamic and doesn't even allow wildcards. So, you have to use hashes given that opening /details?id=123 won't be served from the cache even if you have everything on the client side to construct that page. Most people just cache /details and navigate to /details#id=123. I think if appcache was made a little more developer friendly, the need for service workers would seriously be reduced.


Hm. This seems difficult to prevent without really preventing a lot of valid use cases.


See https://truefactor.io/catworker for botnet admin page


Wheres the source for this?




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: