nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqwsf0ncsm2d4tr7axrwpeh5q46tmvxxau9qlgn4vtnjaw5px6kaxqkp2njn (nprofile…2njn) How do you know it is?
After all, it's not served in a form that you can check before executing it - the browser just does arbitrary code execution of the ???? software.
JavaScript libraries and npm and the like is a massive pile of insecurity, that makes it trivial for any attacker to compromise literally millions of websites with little effort - making it trivial for a website that served free JavaScript yesterday, to be serving proprietary malware as soon as an npm update etc is run.
Maybe LibreJS would stop such malware, but it doesn't seem LibreJS is perfect at preventing the execution of JS in it's 99999 different provided forms.
Nevertheless, the clear solution is real uptime monitoring without JS - which I shall ask someone to write for me.
GNU/翠星石
npub1x2…jar98
2026-08-20 10:18:29 UTC
in reply to nevent1q…cpfe
Author Public Key
npub1x2vc8gu0kj2slcujhkd2y684k32e2zhzn78d2quea4tajn9ql2pqqjar98Seen on
wss://relay.ditto.pubPublished at
2026-08-20 10:18:29 UTCEvent JSON
{
"id": "0ed086c6d08b07a3456a386fdd639c153ef27d7ef1fa23f41d2ebf127093cad4",
"pubkey": "329983a38fb4950fe392bd9aa268f5b455950ae29f8ed50399ed57d94ca0fa82",
"created_at": 1787221109,
"kind": 1,
"tags": [
[
"p",
"7412f9e21b536ab1fba61b839bd015d2f6c31bbc283e89d58b9cbaea04dab74c",
"wss://relay.ditto.pub"
],
[
"p",
"f4017a01fc84b3e27a2a1921053171427072bbb587783cd3a46996e515c46538",
"wss://relay.ditto.pub"
],
[
"e",
"508054a4814db86270953128de6a7544311d234c09f4b7a9551c4b29fe870615",
"wss://relay.ditto.pub",
"reply"
],
[
"proxy",
"https://freesoftwareextremist.com/objects/aa69338b-c6a5-46c2-98cf-093fbea01a75",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqwsf0ncsm2d4tr7axrwpeh5q46tmvxxau9qlgn4vtnjaw5px6kaxqkp2njn How do you know it is?\n\nAfter all, it's not served in a form that you can check before executing it - the browser just does arbitrary code execution of the ???? software.\n\nJavaScript libraries and npm and the like is a massive pile of insecurity, that makes it trivial for any attacker to compromise literally millions of websites with little effort - making it trivial for a website that served free JavaScript yesterday, to be serving proprietary malware as soon as an npm update etc is run.\n\nMaybe LibreJS would stop such malware, but it doesn't seem LibreJS is perfect at preventing the execution of JS in it's 99999 different provided forms.\n\nNevertheless, the clear solution is real uptime monitoring without JS - which I shall ask someone to write for me.",
"sig": "c7e1da1893fe81daff09cc2f0f2c2430ba2c11e0888a8db2a82d9c9b254717d18c8a717add7ddaad9c526e6ec4288a745ec3a2facb513d9ec09c63de84d95d46"
}