jeudi 24 août 2017

Baidu TongJi (Analytics) is directing browsers to DDOS China's Enemies?

I have a site that uses Baidu TongJi (Analytics). Like most other javascript libraries, it is done through injecting a line of Javascript to the HTML.

module.exports = function(id) {
if (!id) {
    throw new Error('请填写百度统计id');
}
    var elm = document.createElement('script');
    elm.src = '//hm.baidu.com/hm.js?' + id;
    var body = document.getElementsByTagName('body')[0];
    body.appendChild(elm);
}

To my horror, once it has initialised, my browser's console and network screen is flood with around 3000+ network requests to Ming Jing News (fake news according to Chinese's communist government) in just 100 seconds... and it kept going until I stopped it.

I am starting to think this is similar to the last time the great wall of china was used to launch attacks to GitHub using Baidu's CDN.

http://ift.tt/2wL7CP2

http://ift.tt/19YfOwR

I am currently calling Baidu from outside of the China and I am wondering if this is normal... Will the people inside the China be spared from this?




Aucun commentaire:

Enregistrer un commentaire