Re:Pi-hole Remote Code Execution
by userbinator on Saturday March 28, 2020 @08:07PM
(#22715277)
AFAIK Pi-holes are almost always going to be sitting inside a LAN and owned by whoever owns the other devices on the network too, so the risk is quite low.
[ Parent
| on HN ]
Re:Pi-hole Remote Code Execution
by bubblethink on Saturday March 28, 2020 @11:50PM
(#22716222)
In general, yes, but this is how real issues start. Look at all the bmc software written in the world. It's utter horseshit. You are supposed to use a dedicated vlan for accessing the bmc. Everyone is still fighting the bmc software and it is routinely accessed over the open internet.
What is bmc software?
Re:Pi-hole Remote Code Execution
by bubblethink on Monday March 30, 2020 @10:22PM
(#22734391)
idrac, ilo, etc.
Re:Pi-hole Remote Code Execution
by jimmySixDOF on Sunday March 29, 2020 @07:39AM
(#22718168)
they should remedy that ;}
Yes definitely. My ISP does not allow me to expose a DNS server to the internet, they told me it was against the law. So it seems you'd have to break the law in my country in order to be vulnerable to this!