Hacker News Reader

So who's doing this? The Chinese government? Baidu themselves?

Sad but true, it is better to use tcpwrappers to block China bot nets, see for example http://g14n.info/2015/03/server-hardening-tips/#restrict-ssh...

I was going to make point that Baidu should serve his analytics-js over https only.

But thinking about it, there are fails on so many levels.

This is far more interesting than the OP. Thanks for sharing.

You mean TFA.