4 ms·
What can you possibly know from such a scan? Standard clearly states that pretty much nothing: https://www.w3.org/TR/websockets/#concept-websocket-close-fail h
by gear54rus 6y ago
What can you possibly know from such a scan?
Standard clearly states that pretty much nothing: https://www.w3.org/TR/websockets/#concept-websocket-close-fail https://www.w3.org/TR/websockets/#concept-websocket-close-fa...
Sure they're shady and that needs to be blocked, but security implications? Pretty much nil.
- Sohcahtoa82 6y agoTiming attacks can be used to determine if the TCP connection was successful, even if no data could be exchanged because the WebSocket failed to negotiate.
- olliej 6y agoThe original post about this seemed to indicate it might be being used to track, identify, and/or verify a client is a real system vs. a bot
- cygx 6y agoSure they're shady and that needs to be blocked, but security implications? Pretty much nil. Fingerprinting. Vulnerability discovery. Messing up programs that don't know how to deal with unexpected HTTP requests.