Simon Willison’s Weblog

The code injected to steal passwords in Tunisia. Here’s the JavaScript that (presumably) the Tunisian government were injecting in to login pages that were served over HTTP.

Posted 24th January 2011 at 6:45 pm

Recent articles

How I automate my Substack newsletter with content from my blog - 19th November 2025
Trying out Gemini 3 Pro with audio transcription and a new pelican benchmark - 18th November 2025
What happens if AI labs train for pelicans riding bicycles? - 13th November 2025

javascript 725 security 566 recovered 213 tunisia 3

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe