4 ms·
I can instantly think of a gazzillion ways how this can be abused :D
by kissgyorgy 6y ago
I can instantly think of a gazzillion ways how this can be abused :D
- dpcan 6y agoGo on....
- LunaSea 6y agoDNS rebinding attacks is probably one of them.
- belorn 6y agoBrowsers will need to update their same-origin policy so that a change in IP address will block same requesting a different site under a different name.
- LunaSea 6y agoDNS rebinding attacks also work in non-browser environments like SSRF attacks.
- philsnow 6y agoThis would mean that long-lived single page web apps would need to be hard-refreshed every once in a while when, through no fault of the app developer, all the IP addresses that their domain name resolves to have rotated.
- steve76 6y agoMisuse. Tunneling data and commands over DNS to bypass firewalls What was used to resolve IPs from domains by research institutions is now used for hookups, trolling, zoom meetings and social media influencers selling herbal supplements.
- Ayesh 6y agoThis is what I immediately thought too. I don't think even NTP servers screamed this much potential for abuse by the time th standards were being drafted. However, I imagine this to use TCP and not UDP (didn't real the whole RFC yet), which mitigates some of the attacks.