4 ms·

I wonder how successful such automated scanning attacks are against a simple login screen though. Does that really have much chance with a reasonably secure pro

I wonder how successful such automated scanning attacks are against a simple login screen though. Does that really have much chance with a reasonably secure project? That then says "don't use self hosting, EVER, for ANYTHING. Get rid of the NAS, too...".

pjc50 11y ago
In the past it's been something of a problem against routers: http://www.securitytracker.com/id/1029769 http://www.securitytracker.com/id/1029769 XSS/CSRF is often effective as well: bypass the login screen by using the existing session of a user who's visiting $BADSITE from the same browser as they used to login to their device. Tragically, for the average nontechnical user, the risk of everything except state attacks and acquishutdowns is lower when using a cloud service than self-hosting.