4 ms·
Not sure this makes any sense, the 6 years past EOL consumer linux device isn't running a browser. Or are you assuming the user's browser itself is compromised
by fouc 5y ago
Not sure this makes any sense, the 6 years past EOL consumer linux device isn't running a browser.
Or are you assuming the user's browser itself is compromised and is running random javascript hitting the NAS address? That would be unfortunate, but I'm not sure I'd blame it on the "6 years past EOL consumer linux device"
- bigiain 5y agoDoesn’t need any browser compromise as such, just a user on the same wifi network running a browser and visiting a site with malicious JavaScript (possible a malicious site, possible a benign site with us delivered by a shitty ad network, possible a poorly secured site with persistent xss flaws). Classic old cross origin request forgery. It ranks #7 I owasp’s top 10 website security flaws, and they have this to say about it: “XSS is the second most prevalent issue in the OWASP Top 10, and is found in around two thirds of all applications.“