7 ms·
Do you have a reference for "Browsers block many ports" ? I thought there are even ssh clients that run in javascript in the browser. That wouldn't work if br
by tgflynn 6y ago
Do you have a reference for "Browsers block many ports" ?
I thought there are even ssh clients that run in javascript in the browser. That wouldn't work if browsers were blocking access to port 22 for outgoing packets/connections.
- zeepzeep 6y agoGo to https://google.com:22 https://google.com:22 "This address uses a network port which is normally used for purposes other than Web browsing. Firefox has canceled the request for your protection."
- tgflynn 6y agoHmm. There's some more information here: https://www-archive.mozilla.org/projects/netlib/portbanning https://www-archive.mozilla.org/projects/netlib/portbanning. I'm up-voting your original comment because it does seem like a potentially valid concern, at least worthy of discussion, and shouldn't be down-voted in my opinion.
- pwinnski 6y agoSo moving my SSHD port opens me up to the wide array of SSHD exploits that run inside of Firefox? I'm not sure that web browsers are a popular vector for network exploits. Counting on anything client-side is not a wise approach to network security.
- tgflynn 6y agoAny piece of javascript code on any website you visit is going to be running inside of Firefox on your local network. I don't know how widespread these kinds of attacks are but they are reasonably well known which is why these port blacklists were implemented in the first place: https://www-archive.mozilla.org/projects/netlib/portbanning https://www-archive.mozilla.org/projects/netlib/portbanning.