Skip to content

Operation Narnia: Iran’s nuclear scientists reportedly killed simultaneously using special weapon

Technology
324 157 0
  • Album 'Hysteria' Out Now

    Technology technology
    1
    1
    1 Stimmen
    1 Beiträge
    0 Aufrufe
    Niemand hat geantwortet
  • 35 Stimmen
    1 Beiträge
    0 Aufrufe
    Niemand hat geantwortet
  • Founder of 23andMe buys back company out of bankruptcy auction

    Technology technology
    60
    1
    350 Stimmen
    60 Beiträge
    0 Aufrufe
    A
    Come on up to Canada, we still got that garlic bomb. I can still taste the one from last week
  • 1 Stimmen
    1 Beiträge
    2 Aufrufe
    Niemand hat geantwortet
  • We Should Immediately Nationalize SpaceX and Starlink

    Technology technology
    495
    1
    1k Stimmen
    495 Beiträge
    30 Aufrufe
    F
    Are you for real? Can you guess how many Saturn V rockets ended up exploding throughout the first mission to put man on the moon? Trick question, the answer was ZERO. The Saturn V program had completed more successful milestones in 1 year than SpaceX has managed in 5 year. SpaceX has been late on every single deliverable to NASA. They were supposed to show they can reliably perform the propellant transfer for the NASA contract, and instead Musk focused on testing the deployment of starlink satellites, which of course failed. And now they lost one more on the pad getting fueled up. It's complete incompetence, which is the one thing Musk can guarantee
  • Windows 11 remote desktop microphone stops working intermittently

    Technology technology
    7
    16 Stimmen
    7 Beiträge
    7 Aufrufe
    S
    When I worked in IT, we only let people install every other version of Windows. Our Linux user policy was always “mainstream distro and the LTS version.” Mac users were strongly advised to wait 3 months to upgrade. One guy used FreeBSD and I just never questioned him because he was older and never filed one help desk request. He probably thought I was an idiot. (And I was.) Anyway, I say all that to say don’t use Windows 11 on anything important. It’s the equivalent of a beta. Windows 12 (or however they brand it) will probably be stable. I don’t use Windows much anymore and maybe things have changed but the concepts in the previous paragraph could be outdated. But it’s a good rule of thumb.
  • 41 Stimmen
    5 Beiträge
    4 Aufrufe
    paraphrand@lemmy.worldP
    Network Effects.
  • 1 Stimmen
    8 Beiträge
    7 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.