3 ms·
Years ago I noticed any webpage could just use an <img> tag to include an image hosted in my LAN. For example, adding such a tag to any website to include a lin
by vadfa 5y ago
Years ago I noticed any webpage could just use an <img> tag to include an image hosted in my LAN. For example, adding such a tag to any website to include a link to the usual gateway ip addresses (192.168.0.1 and so on) will trigger an http authentication dialog for many users.
It's the kind of thing that I thought would be impossible because it seems like such a boundary crossing. Glad they are eventually fixing this...
- southerntofu 5y agoThat's what we get for enabling 3rd party requests on the web in the first place. Hyperlinks are great but enabling content from/to 3rd parties was definitely a design mistake of the web. Gemini definitely got this right, so when you run a query to a server, there's only 2 parties involve and no external tracker, and no served script to try and undermine your security by scanning your local network. Seriously, if you'd told me in the mid-90s we'd have connected locks and lightbulbs and surfing to a random website could alter physical properties of my surroundings and scan my local network for vulns without my consent, i would probably have given up on IT entirely as humanity's doom.