3 ms·
I am dubious that any of my Debian machines would fall for this. BUT... I was unaware of this DHCP attack surface for WPAD. Does anybody know if Debian has so
by daveloyall 10y ago
I am dubious that any of my Debian machines would fall for this.
BUT... I was unaware of this DHCP attack surface for WPAD. Does anybody know if Debian has some scripts for receiving a URL via that mechanism and then visiting it? I guess this would be achieved by libproxy or something?
Do the browsers do some WPAD stuff independently?
- kuschku 10y agoNetworkManager and dhcpcd will usually auto-configure with WPAD, and all major browsers will use it. If you're using KDE, you can disable it under System Settings > Network > Settings > Proxy > No Proxy. If you want to disable it for the browsers, see https://news.ycombinator.com/item?id=12167767 https://news.ycombinator.com/item?id=12167767
- daveloyall 10y agoI don't use network manager. I do use wicd. Looks like I have isc-dhcp-client, not dhcpcd5. The DNS-based mechanism might get me, though... I don't know. Is that implemented exclusively at the browser layer?
- eikenberry 10y agoI don't think dhcpcd5 does this. Do you have a reference?
- eikenberry 10y agoFound the reference.. it supports wpad when used as a dhcp server. It doesn't support it as a client.