News for hackers. Stuff that matters.

A comment on Ask HN: Why does the US Visa application website do a port-scan of my network?. Parent comment

Re:Ask HN: Why does the US Visa application website do a por... by tifkap on Wednesday August 20, 2025 @05:22AM (#44960197)
This is most likely an attempt to connect to a webserver on your own device to collect data and/or do tracking.

Remember back in June when Facebook/meta got caught tracking users trough a webserver on Android phone thought Messenger and Instagram? Same thing.

See: https://news.ycombinator.com/item?id=44169115 and https://news.ycombinator.com/item?id=44175940

[ Parent | on HN ]
Re:Ask HN: Why does the US Visa application website do a por... by darkwater on Wednesday August 20, 2025 @08:26AM (#44961269)
How are you so sure?
[ Parent | on HN ]
Re:Ask HN: Why does the US Visa application website do a por... by dannyw on Wednesday August 20, 2025 @11:19AM (#44962738)
Why do you say that’s most likely?

This is a common pattern for connecting to smart cards / hardware security devices. Probably a service or hardware that’s run on official CBP machines that should be disabled for prod, but forgot.

[ Parent | on HN ]
Re:Ask HN: Why does the US Visa application website do a por... by 77pt77 on Wednesday August 20, 2025 @11:44AM (#44962970)
This is by far the most likely reason.

I personally use pages that authenticate via a smartcard using this exact scheme.

There is a Java "plugin" that is nothing but a mini webserver that listens on a specific port and performs authentication.

[ Parent | on HN ]