Hacker News Reader

The MITM on HTTPS traffic that seems to be involved in the first attack stages is actually pretty good evidence.

Do you have a link to this? I haven't seen anything regarding HTTPS injection. Just injection of code into javascript resources hosted by Baidu CDN, over HTTP.

If there is a MITM on https then browsers need to untrust those certs.

Reply on news.ycombinator.com