Skip to content

Tough, Tiny, and Totally Repairable: Inside the Framework 12

Technology
105 68 1
  • 17 Stimmen
    9 Beiträge
    0 Aufrufe
    brewchin@lemmy.worldB
    Inevitable, really. And zero surprise it's coming out of China.
  • Browser Alternatives to Chrome

    Technology technology
    14
    12 Stimmen
    14 Beiträge
    0 Aufrufe
    L
    I've been using Vivaldi as my logged in browser for years. I like the double tab bar groups, session management, email client, sidebar and tab bar on mobile. It is strange to me that tab bar isn't a thing on mobile on other browsers despite phones having way more vertical space than computers. Although for internet searches I use a seperate lighter weight browser that clears its data on close. Ecosia also been using for years. For a while it was geniunely better than the other search engines I had tried but nowadays it's worse since it started to return google translate webpage translation links based on search region instead of the webpages themselves. Also not sure what to think about the counter they readded after removing it to reduce the emphasis on quantity over quality like a year ago. I don't use duckduckgo as its name and the way privacy communities used to obsess about it made me distrust it for some reason
  • Inside a Dark Adtech Empire Fed by Fake CAPTCHAs

    Technology technology
    1
    10 Stimmen
    1 Beiträge
    1 Aufrufe
    Niemand hat geantwortet
  • 428 Stimmen
    102 Beiträge
    11 Aufrufe
    D
    That is bullshit, the economy is created to force you into the labor market. This is just a symptom of capitalism.
  • A World Without iPhones?

    Technology technology
    7
    34 Stimmen
    7 Beiträge
    5 Aufrufe
    S
    I believe the world was a better place before smartphones started dominating everyone's attention. It has had a profound impact on how people are socializing, and not in a positive way if you ask me.
  • 157 Stimmen
    30 Beiträge
    15 Aufrufe
    D
    These are the 700 Actually Indians
  • 41 Stimmen
    5 Beiträge
    4 Aufrufe
    paraphrand@lemmy.worldP
    Network Effects.
  • 1 Stimmen
    8 Beiträge
    5 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.