News for hackers. Stuff that matters.

A comment on Vaultwarden commit introduces SSO using OpenID Connect. Parent comment

Re:Vaultwarden commit introduces SSO using OpenID Connect by caymanjim on Friday August 15, 2025 @07:26PM (#44918434)
Why do you think that DNS is required? Anything malicious could (and likely should) hard-code an IP.
[ Parent | on HN ]
Re:Vaultwarden commit introduces SSO using OpenID Connect by crimsonnoodle58 on Friday August 15, 2025 @09:45PM (#44919330)
You ensure DNS is disabled to stop DNS exfil. You can google it, but basically they exfil data by looking up encoded subdomains.

Hardcoding an IP won't help if the network policy disallows all network access.

[ Parent | on HN ]