Simon Willison’s Weblog

The code injected to steal passwords in Tunisia. Here’s the JavaScript that (presumably) the Tunisian government were injecting in to login pages that were served over HTTP.

Posted 24th January 2011 at 6:45 pm

Recent articles

Embracing the parallel coding agent lifestyle - 5th October 2025
Designing agentic loops - 30th September 2025
Claude Sonnet 4.5 is probably the "best coding model in the world" (at least for now) - 29th September 2025

javascript 722 security 551 recovered 213 tunisia 3

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe