Skip to content

Trump Team Has Full Meltdown Over CNN Story on ICE-Tracking App

Technology
146 83 0
  • 0 Stimmen
    1 Beiträge
    2 Aufrufe
    Niemand hat geantwortet
  • 28 Stimmen
    4 Beiträge
    11 Aufrufe
    H
    Looks like it hasn't exactly been actively developed since 2022: https://github.com/BoostIO/BoostNote-App/commits/master/
  • 18 Stimmen
    1 Beiträge
    2 Aufrufe
    Niemand hat geantwortet
  • 404 Stimmen
    143 Beiträge
    75 Aufrufe
    M
    If anyone ever tells you they can't hire enough of blank they are lying to you. People have been running excellent 911 service all over the country for longer than I've been alive maybe they should ask someone?
  • How Do I Prepare My Phone for a Protest?

    Technology technology
    139
    1
    506 Stimmen
    139 Beiträge
    56 Aufrufe
    D
    So first, even here we see foundation money and big tech, not government. Facebook, Google, etc mostly love net neutrality, tolerate encryption, anf see utility in anonymous internet access, mostly because these things don't interfere with their core advertising businesses, and generally have helped them. I didn't see Comcast and others in the ISP oligopoly on that list, probably because they would not benefit from net neutrality, encryption, and privacy for obvious reasons. The EFF advocates for particular civil libertarian policies, always has. That does attract certain donors, but not others. They have plenty of diverse and grassroots support too. One day they may have to choose between their corpo donors and their values, but I have yet to see them abandon principles.
  • How Social Media Brings Out the Worst in Us

    Technology technology
    14
    1
    120 Stimmen
    14 Beiträge
    27 Aufrufe
    sturgist@lemmy.caS
    Suffering from asthma? 9/10 Doctors recommend menthol cigarettes! Peppermint fresh puts the pep in your step!
  • 1 Stimmen
    1 Beiträge
    6 Aufrufe
    Niemand hat geantwortet
  • 1 Stimmen
    8 Beiträge
    15 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.