News for hackers. Stuff that matters.
Re:A proposal to restrict sites from accessing a users' loca... by duskwuff on Wednesday June 04, 2025 @04:01PM (#44184883)
> Can you define "local network"?

Sure - a destination is "local" if your machine has a route to that IP which isn't via a gateway.

If your network is large enough that it consists of multiple routed network segments, and you don't have any ACLs between those segments, then yeah, you won't be fully protected by this browser feature. But you aren't protected right now either, so nothing's getting worse, it's just not getting better for your specific use case.

Re:A proposal to restrict sites from accessing a users' loca... by donnachangstein on Wednesday June 04, 2025 @04:28PM (#44185127)
> Sure - a destination is "local" if your machine has a route to that IP which isn't via a gateway.

Fantastic. Well, Google doesn't agree

The proposal defines it along RFC1918 address space boundaries. The spitballing back and forth in the GitHub issues about which imaginary TLDs they will or won't also consider "local" is absolutely horrifying.

Re:A proposal to restrict sites from accessing a users' loca... by account42 on Thursday June 05, 2025 @06:18AM (#44190181)
Cool so it will protect 99.999% of home networks. Compared to 0% which are protected now. Sounds great!