Simon Willison’s Weblog

The code injected to steal passwords in Tunisia. Here’s the JavaScript that (presumably) the Tunisian government were injecting in to login pages that were served over HTTP.

Posted 24th January 2011 at 6:45 pm

Recent articles

Moltbook is the most interesting place on the internet right now - 30th January 2026
Adding dynamic features to an aggressively cached website - 28th January 2026
ChatGPT Containers can now run bash, pip/npm install packages, and download files - 26th January 2026

javascript 739 security 573 recovered 213 tunisia 3

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe