←back to thread

I can see your local web servers

(http.jameshfisher.com)
652 points jamesfisher | 5 comments | 28 May 19 07:57 UTC | HN request time: 0.727s | source
Show context
jsgyx ◴[28 May 19 08:44 UTC] No.20028318[source]▶
I use NoScript, you can't see shit.
replies(3): >>20028357 #>>20028408 #>>20028429 #
1. dwb ◴[28 May 19 09:06 UTC] No.20028408[source]▶
This is not helpful, because only an extremely small proportion of Web users run NoScript, and nor should they have to.
replies(2): >>20028470 #>>20028474 #
2. gnomewascool ◴[28 May 19 09:20 UTC] No.20028470[source]▶
> This is not helpful, because only an extremely small proportion of Web users run NoScript, and nor should they have to.

Most (non-technical) Web users also don't run their own web servers, so they aren't affected. Among technical users, the proportion with NoScript is probably not as small.

replies(2): >>20028532 #>>20028545 #
3. jsgyx ◴[28 May 19 09:21 UTC] No.20028474[source]▶
That's like saying that people shouldn't have to run ad blockers, that instead ad networks should behave. Sit and wait.
4. tinus_hn ◴[28 May 19 09:36 UTC] No.20028532[source]▶
Most users have a modem or router that comes with a web interface, like just about everything in the internet of things.
5. deadbunny ◴[28 May 19 09:39 UTC] No.20028545[source]▶
Their routers do, along with an ever growing number of IoT devices people happily hook up to their WiFi without a second thought.

Given the long and gory history of companies releasing insecure by default devices methods like this are a legitimate entry point into a network.