News for hackers. Stuff that matters.

A comment on Stupidly Simple DDoS Protocol (SSDP) Generates 100 Gbps DDoS. Parent comment

Re:Stupidly Simple DDoS Protocol (SSDP) Generates 100 Gbps DDoS by CountSessine on Thursday June 29, 2017 @02:23AM (#14661181)
Agreed - but can there ever be any legitimate use case for an home router to speak IGD over its WAN interface? IGD is typically meant to allow your Xbox on your LAN to set up forwarding rules.
[ Parent | on HN ]
Re:Stupidly Simple DDoS Protocol (SSDP) Generates 100 Gbps DDoS by duskwuff on Thursday June 29, 2017 @03:28AM (#14661432)
None. Exposing miniupnpd on a public interface is always a misconfiguration. I'm disappointed that the application even allows it -- it has to know which one is public to set up IP forwarding rules, so it has no excuse.
[ Parent | on HN ]