Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Monday January 14 2019, @03:39PM   Printer-friendly
from the friends-don't-let-friends-use-godaddy dept.

GoDaddy has been caught sneakily injecting JavaScript into the websites it hosts.

I recently started having issues with the admin interface of a website I run and decided to check the browser console to see if any errors were being displayed there. There were and among them was an error stating that a JavaScript map file being loaded (and failing) that I did not recognise. This meant that the actual JavaScript file itself was already loaded via my website. This set off all sorts of alarms for me and I started to dig in further.

I checked the file system for any suspicious files, there were none. I checked the source code and templates for evidence of anything that has been added, there was nothing there. Yet all my pages were being served with the following script injected into them just before the closing html tag...

[...] Of course that comment in the script was a give away of what was going on but I didn't immediately want to believe that the website host itself would be injecting a JavaScript script into my website without my consent! Turned out that's exactly what GoDaddy was doing and they justified it as collecting metrics to improve performance.

The technology that's in use here is called Real User Metrics and GoDaddy has a page about it here - Why am I signed up for Real User Metrics?. If you happen to be a customer in US (which I am not but the website is hosted in a US data centre) then you are automatically opted into this service and all your website's pages will have this JavaScript injected into them.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0, Insightful) by Anonymous Coward on Monday January 14 2019, @05:20PM (4 children)

    by Anonymous Coward on Monday January 14 2019, @05:20PM (#786499)

    if you had any balls you wouldn't accept clients that won't move their stuff to your servers.

    Starting Score:    0  points
    Moderation   0  
       Troll=1, Insightful=1, Total=2
    Extra 'Insightful' Modifier   0  

    Total Score:   0  
  • (Score: 0) by Anonymous Coward on Monday January 14 2019, @05:59PM

    by Anonymous Coward on Monday January 14 2019, @05:59PM (#786522)

    I charge more if I don't host the site because it takes more to get their site up and running without the custom code I run on my servers. But, if the checks clear it doesn't matter where their site is hosted.

  • (Score: 2, Insightful) by DannyB on Monday January 14 2019, @06:54PM (2 children)

    by DannyB (5839) Subscriber Badge on Monday January 14 2019, @06:54PM (#786561) Journal

    if you had any balls you wouldn't accept clients that won't move their stuff to your servers.

    So you are discriminating against women in tech?

    Or an alternate interpretation would be something about sports being somehow related to ensuring clients use your servers.

    --
    The lower I set my standards the more accomplishments I have.
    • (Score: 2) by Gaaark on Monday January 14 2019, @10:47PM

      by Gaaark (41) on Monday January 14 2019, @10:47PM (#786675) Journal

      No, they just don't have any balls themselves, so are jealous.

      --
      --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
    • (Score: 2, Insightful) by Anonymous Coward on Tuesday January 15 2019, @03:59PM

      by Anonymous Coward on Tuesday January 15 2019, @03:59PM (#786940)

      Q: Why do women rub their eyes when they wake up?
      A: Because the don't have balls to scratch.

      Yes, I suppose that it is discriminatory to notice that women have no balls. It's probably even more discriminatory that I only sleep with women who have no balls. But, that is life.