5 ms·
rclone is vulnerable to data exfiltration attacks https://www.danieldent.com/blog/restless-vulnerability-non-browser-cross-domain-http-request-attacks/ https:/
by gordo4 8y ago
rclone is vulnerable to data exfiltration attacks
https://www.danieldent.com/blog/restless-vulnerability-non-browser-cross-domain-http-request-attacks/ https://www.danieldent.com/blog/restless-vulnerability-non-b...
- Operyl 8y agoI quickly skimmed, but this entire attack is assuming that the attacker has successfully MITMed the API. At that point everything is already nuked, so of course you can fabricate any number of attacks. Did I miss something important?
- howeyc 8y agoAm I reading this right? Google/B2/... might send your data to another URL you didn't expect. Not sure why that matters, or why it's an attack. Since they have your data anyway, as that's the whole point of the service, to store your data on their hard drives. Why go through the trouble of sending it elsewhere? To play games with your data for giggles?
- namibj 8y agoNo, the API can tell your software to send some private LAN files, e.g. some IP-filtered secret NFS store, to an URL of it's choosing (so to itself, or your competitor). This is bad, as long as you don't heavily jail and firewall the software to prevent it from ever accessing anything it shouldn't (need to).