Godaddy is injecting code into websites

Community Tech Policy & News
, ,
1

This is apparently the original source:
https://www.igorkromin.net/index.php/2019/01/13/godaddy-is-sneakily-injecting-javascript-into-your-website-and-how-to-stop-it/

Godaddy is apparently injecting metrics gathering JavaScript into websites that are run on their shared hosting service.

Apparently, you can opt out, but this is some serious egg on their face. Injecting tracking code into websites that are not yours is not something you do silently, unless you have malicious intent.

This is pretty fucked up, if you ask me.

9 Likes
2

So they have no issues with monitoring your web site, they have no issues with breaking your web site… so when they say they are going to monitor your website to make it faster does that mean they’ll break it faster?

1 Like
3

It worries me, they are a giant website host, but what about the others? Namecheap? Bluehost… etc?

1 Like
4

I just asked someone that uses godaddy, he said they added it to his sites. He has something like 5+ sites on his account.

2 Likes
5

Yeah, the guy who told me about this said he’s just gonna run his own nginx server instead of continuing to use godaddy.

6

So basically, they think they’re geocities.

Except you pay for it.

2 Likes
7

I only recently discovered that GoDaddy also own WebFaction, and have done for about a year now. I was pretty sad to close my WebFaction account.

8

Good thing Java is completely secure.

1 Like
9

Is anything? :thinking: Not sure where this came from, though.

Didn’t GoDaddy do this a few years ago to block compatibility with Amazon? I remember reading something about that.

1 Like
10

It was a sarcastic joke. :roll_eyes:

11

I couldn’t tell you. :confused:

That sounds like something they may have done though.

12

I got that, but it seems random to trash Java out of the blue. Hence my :thinking:

13

Might be misremebering. But yeah, pretty bizarre thing to do on their end. There are better reporting services lol.

14

I’m not trashing it out of the blue, this thread is about GoDaddy interjecting JavaScript into sites.

15

Java is not Javascript.

4 Likes
16

But you said Java…

JavaScript isn’t inherently insecure, but there are a lot more beginner/n00b devs than there are advanced.

17

Which has nothing to do with the security of JavaScript, and especially not Java.

1 Like
18

Good thing JavaScript is completely secure. Better? Happy?

19

Dude, chill, I was obviously confused. So were you, apparently, it’s fine.

JavaScript is as secure as the development team makes it.

Anyway, I’m out.

1 Like
20

Every language is insecure in its own way. It’s (usually) not the language (adobe flash), but how they use it which determines how secure it is.

You can have immutable and type-safe data structs in JS (Typescript) just as well as you can have mutable structs and type-inferencing variables.

For example, Wordpress uses PHP and without proper hardening, those sites are ripe for auto-exploiting. Is PHP insecure by default? No, but its how it was implemented.

Before people wrote shitty php code, they wrote shitty perl code. So in the early days, you had a bunch of perl daemons running the web. Now, people write shitty js, and in the future, they might continue to do that or find something else.