Skip to content

Supreme Court to decide whether ISPs must disconnect users accused of piracy

Technology
160 121 0
  • 4 Stimmen
    1 Beiträge
    5 Aufrufe
    Niemand hat geantwortet
  • OSTP Has a Choice to Make: Science or Politics?

    Technology technology
    7
    1
    30 Stimmen
    7 Beiträge
    11 Aufrufe
    B
    Ye I expect so, I don't like the way this author just doesn't bother explaining her points. She just states that she disagrees and says they should be left to their own rules. Which is probably fine, but that's just lazy or she's not mentioning the difference for another reason
  • 212 Stimmen
    12 Beiträge
    11 Aufrufe
    erev@lemmy.worldE
    meanwhile i set a wait and save so i have time to finish getting ready and uber tells me it's already arrived.
  • Best MS Office 365 Services in Saudi Arabia for Businesses

    Technology technology
    1
    2
    0 Stimmen
    1 Beiträge
    7 Aufrufe
    Niemand hat geantwortet
  • Using A Videocard As A Computer Enclosure

    Technology technology
    5
    1
    86 Stimmen
    5 Beiträge
    13 Aufrufe
    T
    Back in the day there was a pic floating about where someone had put a micro atx board and psu into a standard PSU chassis into a standard PC case for a spectacular "empty case" mod
  • 19 Stimmen
    12 Beiträge
    16 Aufrufe
    Q
    PSA OP "wikipediasuckscoop" seems to have a personal vendetta against wikipedia. All their posts are various articles bashing the site.
  • 1 Stimmen
    8 Beiträge
    14 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • *deleted by creator*

    Technology technology
    1
    1
    0 Stimmen
    1 Beiträge
    6 Aufrufe
    Niemand hat geantwortet