Hacker News Reader

After I started using NoScript, I was amazed at how many sites load Javascript from other sites. Google-analytics is common but I have noticed more and more sites are trying to load Facebook scripts as well.

Happily, my bank doesn't load Javascript from anywhere else.

View on HN

> After I started using NoScript, I was amazed at how many sites load Javascript from other sites.

Not only that, but I was surprised how much paranoia-induced plugins like NoScript and RequestPolicy induce paranoia themselves. And not entirely without cause, either: sites that load 5 different analytics systems are not uncommon, and I've seen 10 different ad providers on a single page.

Or so you think - as the parent says, it just takes a DNS entry to make somebody else's server appear to be yours.

That, or they might proxy a remote JS file through a script on their servers. I've seen that done a number of times.

Reply on news.ycombinator.com