3 ms·
> Traffic sent to 127.0.0.1 is guaranteed not to leave your machine This is definitely false, without any routing tables. Any unprivileged user can start an S
by yebyen 8y ago
> Traffic sent to 127.0.0.1 is guaranteed not to leave your machine
This is definitely false, without any routing tables. Any unprivileged user can start an SSH tunnel listening on any localhost port above 1024, sending traffic out to wherever.
- j4cob 8y agoThe implicit threat model here is "no one outside your machine can do something to you to make 127.0.0.1 traffic route elsewhere." It's true that software running on your machine can make copies of things and send them elsewhere, but that's not the point of the sentence you quoted.
- gerdesj 8y agoSent to is not the same as sent from