4 ms·
Chrome and Firefox have deployed / are deploying local-network-access which prompts the user when apps try this.
by mozvalentin 4mo ago
Chrome and Firefox have deployed / are deploying local-network-access which prompts the user when apps try this.
- Tade0 4mo agoI've seen it and at least in Chrome it seems to be treating all URLs which are based on an IP address as "local", regardless of the class of the address.
- kibwen 4mo agoI'd be inherently suspicious of any website in the wild attempting to contact a bare IP address. Aside from localhost, my default assumption would be that such a website is either trying to circumvent my hosts file (or circumvent my other DNS configuration, e.g. pi-hole or DNS-over-HTTPS), malware trying to reach a command-and-control server, or malware trying to circumvent my adblocker.
- shit_game 4mo agoI was just about to say that my question in regards to this was "what are web browsers doing about it?"
- pezgrande 4mo agoI guess that's why I am getting so many "Allow to find devices on your network" alerts. Good feature overall.
- SoftTalker 4mo agoOnly a good feature if users have a clue what that question means. Most will click "Yes" because they want to get on with whatever they want to do. Change it to something like "This website is trying to spy on your local devices, do you want to allow this?"
- dpoloncsak 4mo agoI honestly don't think the average Google Chrome user knows what a 'local' device is, and we should go something more ELI5 "This website wants to spy on every other device connected to your network" or something
- lukan 4mo agoSince I can see legitimate use case (complex web apps, one sharing data with another) - I would not use the word spying. But still make it clear what can happen. "Attention! This website wants to get access to other web apps running on this device, do you want to allow this?" And then a link explaining some more. But better words are surely possible.
- deleted 4mo ago[deleted]
- Aachen 4mo agoI need to turn on location access for all software on my system globally to read the battery status of a device over Bluetooth. These "could be used for" warnings are nice and all, but usually goes beyond what makes sense. Proposing that we need to press "be spied upon" just to view photos stored on your NAS is way out there I'm sorry if people don't know what "access local devices" means but actively lying to them about the mechanisms is not going to inform anyone
- SchemaLoad 4mo agoMost of the time this prompt comes up it's actually for a genuine purpose, like spotify trying to find devices on the local network that can play audio, VLC looking for chromecasts, I saw my DJ app ask for local network and discovered it can discover my decks on the network and stream my library over the local network to it. The problem is this prompt is new so the software doesn't show the user why it's just triggered the prompt and the user has no info to work with.
- outside1234 4mo agoAh, THAT's what that is. They really need to shift the message from the BROWSER is trying to find devices to the WEBSITE is trying to find devices.
- RandomDistort 4mo agoI get loads of them when I'm on a Netsweeper filtered network... pretty much any time any asset a page loads is from a blocked site (social media pixels normally).
- lelandfe 4mo agoI hate that there's no "stop asking me" button. I get those regularly in Chrome
- crtasm 4mo agoI just discovered that MacOS was blocking Firefox from connecting to devices on my LAN - there's per-app toggle in system settings. Access to my router's web interface was not blocked (understandably) but this left me rather confused for a while.
- gh02t 4mo agoThis also got me on my partner's Macbook. For the longest time I couldn't figure out why I could access my local services on (Safari? I forget which one actually worked) but not on Firefox/Chrome.
- apitman 4mo agoAny idea if Safari is on board?