HNHacker News
TopNewBestAskShowJobs

dytir

7 karma · joined April 10, 2024

submissionscomments
dytir··on Deprecate 0.0.0.0 for Private Network Access
HN discussion: https://news.ycombinator.com/item?id=41184219

But nothing new:

https://research.nccgroup.com/2023/04/27/state-of-dns-rebind...

https://github.com/nccgroup/singularity/wiki/Protection-Bypa...

dytir··on 0.0.0.0 Day: Exploiting Localhost APIs from the Browser
This is not a zero day. The 0.0.0.0 bypass has been documented for a while now[1], including PNA bypass[2].

[1] https://github.com/nccgroup/singularity/wiki/Protection-Bypa...

[2] https://research.nccgroup.com/2023/04/27/state-of-dns-rebind...