4 ms·
Any access to resolve global dns lets you exfiltrate even if you’re locked to a local resolver. Just blocking connections to the internet directly is not enough
by kortilla 4y ago
Any access to resolve global dns lets you exfiltrate even if you’re locked to a local resolver. Just blocking connections to the internet directly is not enough.
- capableweb 4y agoSure, but again, parent said "Network access" which I assume includes internet (global), local network or any other type of sockets/connections, not just "internet" ones.
- fmajid 4y agoNot all OSes’ resolver libraries use the network. Solaris/Illumos uses door IPC.