4 ms·
We've been over this. It's not about the content of HTTP websites. It's the fact that every HTTP connection is a network-level vulnerability. It's like buildin
by pornel 5y ago
We've been over this. It's not about the content of HTTP websites. It's the fact that every HTTP connection is a network-level vulnerability.
It's like building a fortified castle and leaving a side door wide open for the maid. It's just a maid! Why does she need to have a bolted gate!?
- xg15 5y agoWhat is a "network-level vulnerability"?
- randomhodler84 5y agoI’ll provided an example: When the great firewall rewrites http reqs to inject malicious JavaScript to take down GitHub. See “great cannon incident”. Http is a network level vuln, it allows clients to be hijacked by a mitm. It is totally unacceptable.
- robbedpeter 5y agoCisco osi model levels/layers 1 to 7: physical, data link, network, transport, session, presentation, application. Port numbering is a transport layer feature, so it's technically a transport level / layer 4 vulnerability, not network.