Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Monday January 14 2019, @03:39PM   Printer-friendly
from the friends-don't-let-friends-use-godaddy dept.

GoDaddy has been caught sneakily injecting JavaScript into the websites it hosts.

I recently started having issues with the admin interface of a website I run and decided to check the browser console to see if any errors were being displayed there. There were and among them was an error stating that a JavaScript map file being loaded (and failing) that I did not recognise. This meant that the actual JavaScript file itself was already loaded via my website. This set off all sorts of alarms for me and I started to dig in further.

I checked the file system for any suspicious files, there were none. I checked the source code and templates for evidence of anything that has been added, there was nothing there. Yet all my pages were being served with the following script injected into them just before the closing html tag...

[...] Of course that comment in the script was a give away of what was going on but I didn't immediately want to believe that the website host itself would be injecting a JavaScript script into my website without my consent! Turned out that's exactly what GoDaddy was doing and they justified it as collecting metrics to improve performance.

The technology that's in use here is called Real User Metrics and GoDaddy has a page about it here - Why am I signed up for Real User Metrics?. If you happen to be a customer in US (which I am not but the website is hosted in a US data centre) then you are automatically opted into this service and all your website's pages will have this JavaScript injected into them.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Interesting) by Anonymous Coward on Monday January 14 2019, @04:45PM (8 children)

    by Anonymous Coward on Monday January 14 2019, @04:45PM (#786478)

    How do I know this ?

    I work at GoDaddy.

    I am planning my departure which is imminent ( as in weeks rather than months ).

    Starting Score:    0  points
    Moderation   +5  
       Insightful=1, Interesting=3, Informative=1, Total=5
    Extra 'Interesting' Modifier   0  

    Total Score:   5  
  • (Score: -1, Troll) by Anonymous Coward on Monday January 14 2019, @06:04PM

    by Anonymous Coward on Monday January 14 2019, @06:04PM (#786524)

    Hmm ... maybe you are the problem and things will improve once you leave? Please let us know when you depart so we can check GD support to see if it gets better.

  • (Score: -1, Flamebait) by Anonymous Coward on Monday January 14 2019, @07:36PM (4 children)

    by Anonymous Coward on Monday January 14 2019, @07:36PM (#786586)

    I hope you get sued for backstabbing your beneficent employer. With disloyal scum like you, it's no wonder everybody's looking to outsource.

    • (Score: 0) by Anonymous Coward on Monday January 14 2019, @08:00PM (1 child)

      by Anonymous Coward on Monday January 14 2019, @08:00PM (#786597)

      Because outsourced employees are so much more loyal...

      • (Score: 0) by Anonymous Coward on Monday January 14 2019, @08:15PM

        by Anonymous Coward on Monday January 14 2019, @08:15PM (#786602)

        GGP is neither loyal nor cheap. Pajeet is cheap.

    • (Score: -1, Flamebait) by Anonymous Coward on Monday January 14 2019, @08:41PM (1 child)

      by Anonymous Coward on Monday January 14 2019, @08:41PM (#786625)

      You are one of those morons, who think loyalty over everything. It ain't. Fuck you, you little bitch.

      • (Score: 0) by Anonymous Coward on Tuesday January 15 2019, @02:58AM

        by Anonymous Coward on Tuesday January 15 2019, @02:58AM (#786760)

        To me, TRUST is damm near everything.

        If I can' t trust it, what good is it?

        Unfortunately, many companies will sell off their trusted reputation, which took many years to easablish, for a quick executive level handshake.

  • (Score: 2) by Azuma Hazuki on Tuesday January 15 2019, @06:03AM (1 child)

    by Azuma Hazuki (5086) on Tuesday January 15 2019, @06:03AM (#786810) Journal

    Please be posting this from a not-at-work machine, preferably behind a proxy. I'd hate for the company to pick up on who this is and blackball you. They're the kind of scum who'd do that, based on my past experience with them (no, never as an employee, thank Madokami).

    --
    I am "that girl" your mother warned you about...
    • (Score: 2) by Runaway1956 on Tuesday January 15 2019, @03:08PM

      by Runaway1956 (2926) Subscriber Badge on Tuesday January 15 2019, @03:08PM (#786913) Journal

      He's just a troll. He's never even met a godaddy employee. He'd have to leave his mama's basement to do so. You would be better off studying Martin Luther King Jr's "I have a dream" speech.