Skip to content

Minnesota Shooting Suspect Allegedly Used Data Broker Sites to Find Targets’ Addresses

Technology
75 56 226
  • 20 Stimmen
    1 Beiträge
    0 Aufrufe
    Niemand hat geantwortet
  • 'We're done with Teams': German state hits uninstall on Microsoft

    Technology technology
    102
    842 Stimmen
    102 Beiträge
    339 Aufrufe
    F
    You’ve been patient? Bye
  • (azazoaoz)

    Technology technology
    1
    1
    0 Stimmen
    1 Beiträge
    11 Aufrufe
    Niemand hat geantwortet
  • 248 Stimmen
    232 Beiträge
    225 Aufrufe
    U
    Repair technicians see by far the most of seagate drives
  • 465 Stimmen
    133 Beiträge
    232 Aufrufe
    B
    If an industry can't survive without resorting to copyright theft then maybe it's not a viable business. Imagine the business that could exist if only they didn't have to pay copyright holders. What makes the AI industry any different or more special?
  • 4 Stimmen
    2 Beiträge
    6 Aufrufe
    M
    Epic is a piece of shit company. The only reason they are fighting this fight with Apple is because they want some of Apple’s platform fees for themselves. Period. The fact that they managed to convince a bunch of simpletons that they are somehow Robin Hood coming to free them from the tyrant (who was actually protecting all those users all along) is laughable. Apple created the platform, Apple managed it, curated it, and controlled it. That gives them the right to profit from it. You might dislike that but — guess what? Nobody forced you to buy it. Buy Android if Fortnight is so important to you. Seriously. Please. We won’t miss you. Epic thinks they have a right to profit from Apple’s platform and not pay them for all the work they did to get it to be over 1 billion users. That is simply wrong. They should build their own platform and their own App Store and convince 1 billion people to use it. The reason they aren’t doing that is because they know they will never be as successful as Apple has been.
  • 1 Stimmen
    8 Beiträge
    36 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • AI will replace routine — freeing people for creativity.

    Technology technology
    14
    2
    42 Stimmen
    14 Beiträge
    55 Aufrufe
    G
    So you are against having machines do the work of blue collar workers? We should all be out in the fields with plows instead of using a tractor and assembling everything by hand in factories?