undefined | Better HN

0 pointssillysaurus212y ago0 comments

If your concern is the host operator, well obv can't circumvent that.

Of course we can circumvent that. Make a plugin to alert the user whenever the JS changes.

0 comments

What do you base your initial known good JS on though? What is the user supposed to do with the information that the JS has changed? A diff of minified JS isn't that helpful.

sillysaurus2OP12y ago

The author would say "the current version is 0.6.4 and its JS hashes to this SHA256 hash: xxx"

Open source already does this for binaries. Why not JS?

This assumes it's even possible to get a consistent hash of all javascript executing on a page, though.

mike-cardwell12y ago

Script on a site like this should not be minified. It should be easily readable and well commented, so that people can audit it properly.

j / k navigate · click thread line to collapse