3 ms·
Kind of a tangent, but how large or small is the risk of nefarious sites running torrent nodes without the user's knowledge or consent? We've seen something si
by adrianmonk 6y ago
Kind of a tangent, but how large or small is the risk of nefarious sites running torrent nodes without the user's knowledge or consent?
We've seen something similar with using JS to mine bitcoin. That gets you money, so that probably has a stronger incentive, but someone might want to gain access to the resources this would allow.
The WebTorrent FAQ (https://webtorrent.io/faq https://webtorrent.io/faq) says this uses WebRTC and further says:
> WebTorrent clients running on one domain can connect to clients on any other domain. No silos! The same-origin policy does not apply to WebRTC connections since they are not client-to-server.
Does the browser do anything to protect the user against something like this? Is there a permission for network access, and is it allowed or denied by default?
- feross 6y ago> Is there a permission for network access, and is it allowed or denied by default? WebRTC data channels are allowed by default. > Does the browser do anything to protect the user against something like this? A nefarious website can already use the fetch() API to upload or download massive amounts of data if their goal is waste bandwidth. WebRTC doesn't introduce any new vulnerability here.