Simon Willison’s Weblog

The code injected to steal passwords in Tunisia. Here’s the JavaScript that (presumably) the Tunisian government were injecting in to login pages that were served over HTTP.

Posted 24th January 2011 at 6:45 pm

Recent articles

Phoenix.new is Fly's entry into the prompt-driven app development space - 23rd June 2025
Trying out the new Gemini 2.5 model family - 17th June 2025
The lethal trifecta for AI agents: private data, untrusted content, and external communication - 16th June 2025

javascript 713 security 526 recovered 213 tunisia 3

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe