News for hackers. Stuff that matters.

A comment on Blizzard games were vulnerable to DNS rebinding attack. Parent comment

Re:Blizzard games were vulnerable to DNS rebinding attack by SahAssar on Monday January 22, 2018 @05:44PM (#16208791)
The vulun is in the fact that the program blindly trusts incoming HTTP based only on a nonce being in both the body and a header.
[ Parent | on HN ]
Re:Blizzard games were vulnerable to DNS rebinding attack by benchaney on Monday January 22, 2018 @06:54PM (#16209381)
No, the "vuln" is assuming that only users on the machine can access localhost. This is a completely reasonable assumption, and it is on the browsers for invalidating it.
[ Parent | on HN ]