back to article Polyfill.io owner punches back at 'malicious defamation' amid domain shutdown

After having its website shut down, the polyfill.io owner is fighting back against claims it smuggled suspicious code onto websites all across the internet. In a series of angry Xeets over the past three days, what's likely the CDN operator that owns the Polyfill service accused Cloudflare, the media, and others of "malicious …

  1. Pascal Monett Silver badge

    "The site owner claimed to have $50 million in funding"

    Um, buddy, since you claim a number of things that are already demonstrably fake, you can go claim as much money as you wish, nobody cares.

    You are lying all over the place. You claim to be based in the UK, so where's your office ? What's your VAT number ? Why is your phone number not a UK number ?

    You can talk about slander all you want. If that were true, all you'd need to do is file a complaint from your UK office. Right ?

    I don't know if you're Chinese or not and I don't care. You've been found out and shut down and that's a good thing. Go ahead and try to create an empire, I will never trust you or your products.

    1. katrinab Silver badge
      Alert

      Re: "The site owner claimed to have $50 million in funding"

      29 Harley Street parhaps? https://www.theguardian.com/business/2016/apr/19/offshore-central-london-curious-case-29-harley-street

      Or, there are plenty more like it.

      1. Pascal Monett Silver badge

        Interesting link. 2000+ companies at a single address ?

        And HM's Revenue Service is not looking into this ?

        Hmmm.

        1. Anonymous Coward
          Anonymous Coward

          re. And HM's Revenue Service is not looking into this ?

          Inland Revenue's not looking at it, because for many years it has held a strong belief that 2000+ companies at a single address is merely a local manifestation of Dr Who-time-space-travel-compression-diplacement phenomenon which requires no further investigation.

          Alternatively, this specific address has never surfaced in their thorough investigations, which is not a surprising given that practically nobody in the UK has ever heard of it...

        2. localzuk

          Having so many companies at a single address like that is fairly normal. I had a legit company registered to a similar service - it allows a single owner limited company to put down an address which isn't their home address. Mail gets redirected etc... They're called "Registered Office Services". Some offer other services such as drop in office space and meeting rooms as well.

          However, its also a way of running a company mill for nefarious purposes for company mills.

          HMRC won't investigate as its a pretty normal way to operate for small LTDs, and telling that apart from the company mills isn't just a case of having lots of companies at one address.

        3. F. Frederick Skitty Silver badge

          As others have pointed out, it's a common practice in the UK. It's the company "registered address", not the address of the actual corporate entity. It's a terrible system though, as I found out when I took a (fairly well known) web based vendor to the small claims court. The summons was sent to their registered address and they failed to attend court, so the claim was therefore automatically ruled in my favour. Actually tracking down the real address of the company in order to get the court bailiffs to them was a bloody nightmare. I eventually found out where their administrative offices are, but the court bailiffs were hopeless - they couldn't get past the security at the reception (it was a building with a number of companies in it) and gave up. So I then had to go back to the small claims court and pay a further sum to be able to instruct a private firm of bailiffs. At least they didn't muck about, and I finally got my money back plus compound interest. My advice if you find yourself in a similar situation is to not give up, expect to have to pay the extra to get the right to instruct private bailiffs and use the option to add compound interest in order to cover the time it took you to deal with the matter.

          1. An_Old_Dog Silver badge

            I'm not disputing what you wrote, but it seems unreasonable that agents of the court (the bailiffs) couldn't get past private security.

            1. F. Frederick Skitty Silver badge

              From what I was told by the court bailif's office, they went to the building and asked at reception to see someone from the company in question. The response was that no one suitable was available, and at that point they just left. It seems court bailifs aren't particularly well motivated, whereas the private ones are motivated by the need to get their fee and will get a court order to force entry if necessary.

          2. Alan Brown Silver badge

            > they couldn't get past the security at the reception

            That's...interesting, given that interfering with a court bailiff executing their duty is a criminal offence in itself

        4. An_Old_Dog Silver badge

          2000+ Companies at One Address

          It's probably just a building with one or more solicitors' offices, where said solicitors are acting as the registered agents for various companies.

    2. Korev Silver badge
      Joke

      Re: "The site owner claimed to have $50 million in funding"

      You are lying all over the place. You claim to be based in the UK, so where's your office ? What's your VAT number ? Why is your phone number not a UK number ?

      Oh come on, anyone who's ever done DIY knows it's legit...

      1. John Brown (no body) Silver badge

        Re: "The site owner claimed to have $50 million in funding"

        True, but maybe their address is polyfill.er, not polyfill.io :-)

  2. Steve Davies 3 Silver badge
    Childcatcher

    More lies than a certain GOP candidate for POTUS?

    Everything about this reincarnation of polyfill.io is suspect.

    As has been asked, if you are based in the UK, where is your registered office, company Number, VAT number etc etc etc.

    Oh wait, this is a shell company run out of some sweatshop in China. Please prove me wrong.

    Avoid at all costs.

  3. sarusa Silver badge
    Devil

    '$50M in Funding'

    You're going... to build... a Content Delivery Network... that surpasses CloudFlare... with $50M in funding? Even with the USD to yuan conversion rate you're not even going to beat Mega with that little cash.

    Of course the whole thing is a lie, like everything else these guys are saying, but you could at least make even lies plausible.

    1. Michael Strorm Silver badge

      Re: '$50M in Funding'

      This isn't even a plan, genuine or otherwise. It's just some random loser who's bitter at having just been called out by Cloudflare going "Yeah, well... I'm gonna go build my own Cloudflare... with blackjack! And hookers!"

      1. mark l 2 Silver badge

        Re: '$50M in Funding'

        They forgot to mention not only do they have $50m of funding they also have a free 30 days trial with Squarespace from watching a sponsored Youtube video, so take that Cloudflare!

  4. Brewster's Angle Grinder Silver badge

    It's playground stuff.

  5. David Newall

    io or polyfill?

    With io domain being bought by funnull, and shenanigans about where they are based, is it polyfill.io who's doing something nefarious or funnull? Certainly if the io domain is running amok, polyfill.io might be blameless.

    Also, at 0136 UTC, polyfill.com does not resolve. The article implies it should.

    1. Anonymous Coward
      Anonymous Coward

      Re: io or polyfill?

      Found in:

      uBlock filters – Badware risks

      ...so unfair!

      1. KeshLives

        Re: io or polyfill?

        Yeah, I saw polyfill,io in some blacked outbound stuff in zscaler logs a couple days ago.

  6. I am the liquor

    Inevitable

    When you hear a claim like "We have no supply chain risks," you know you're not going to hear anything true from this outfit.

    Given that modern web design is founded on essentially ignoring supply chain risks, problems like this are inevitable. Even my bank's online banking portal wants to load javascript from 5 different domains that are not their own. No doubt it would be even more if I permitted those first 5 to load. This does not seem to be a safe way to design web sites. I bet for every example of malicious code on a 3rd-party CDN that becomes public like this one, there are a dozen more that no-one notices because the perpetrators were smarter about it.

    1. Michael Strorm Silver badge

      "We have no supply chain risks..."

      "...we *are* the supply chain risk!"

    2. ecofeco Silver badge
      FAIL

      Re: Inevitable

      There is no need to guess. Using multiple servers outside of your own website is NOT a safe way to run a website.

      The absolute DUMBEST development I ever saw. And all for advertising.

  7. kotenok2000

    polyfill[.]com has already been shut down.

  8. TimmyD

    XEETS??

    This will not stand.

    1. John Brown (no body) Silver badge

      Re: XEETS??

      When I see Xeets my first mental image is a of a spotty teenager covered in yellow, puss-filled spots or zits :-)

      1. that one in the corner Silver badge

        Re: XEETS??

        > When I see Xeets my first mental image (censored)

        Good, that is the perfect image to apply to messages sent via a certain platform.

        I also champion the use of "Xits", in both cases with the X pronounced in English as a Z, as in Xavier.

        And with either spelling, remember that you don't "post" a Xeet, you "pop it up" or "squeeze out a quick Xit", that celebrity got covered in Xeets, his Xits are really inflamed etc.

    2. that one in the corner Silver badge

      Re: XEETS??

      > This will not stand

      Sure it will, a really good Xeet will stand proud, especially if it touched a sore point.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like