News for hackers. Stuff that matters.
Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by kevinbowman on Friday October 17, 2014 @10:06AM (#8471016)
To protect against these kinds of attacks (and DNS rebinding attacks), most (?) modern browsers won't allow a webpage to make requests to non-routable IP addresses unless the page itself came from a non-routable IP address. Not that that's a fix, but it definitely helps mitigate the issue.
Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu... by fulafel on Tuesday October 21, 2014 @09:09AM (#8487102)
I just tested Firefox and Chrome, both made a HTTP request successfully to my laptop's rfc1918 address referenced from a web page on the internet. Maybe you are thinking of IE's "zones" feature?