3 ms·
Sounds like the attacker has to be on the local network (or presumably VPN) to use the exploit? If so that's a nontrivial hurdle in many cases.
by _bxg1 8y ago
Sounds like the attacker has to be on the local network (or presumably VPN) to use the exploit? If so that's a nontrivial hurdle in many cases.
- Tehnix 8y agoLike a WiFi at a café or airport?
- Tharkun 8y agoPublic WiFi networks really should use client isolation. Sadly, many don't.
- deleted 8y ago[deleted]
- Xylakant 8y agoEven if client isolation is used, do you trust your local cafe’s WiFi AP?
- euroclydon 8y agoYou can just go to a public place and run your own hotspot.
- codedokode 8y agoAnd use a name and SSID of some well-known public WiFi network. Then make a captive portal to force the user open an attacker-controlled page in a browser.
- ru999gol 8y agoit should be mentioned that even with WPA2-PSK wifi you are vulnerable to arp spoofing
- deleted 8y ago[deleted]
- deleted 8y ago[deleted]
- _bxg1 8y agoI was thinking in enterprise contexts, but, yes, that's fair. Still, anybody doing anything important on public WiFi should be using a VPN.
- albertgoeswoof 8y agoThe author details the options. If can find an XSS on dells website it’s possible.
- kibibu 8y agoIt looks to me like you could register any domain starting with "localhost" (eg. localhostevil.com) and it would work. (apart from the download whitelist)