Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu...
by kevinbowman on Friday October 17, 2014 @10:06AM
(#8471016)
To protect against these kinds of attacks (and DNS rebinding attacks), most (?) modern browsers won't allow a webpage to make requests to non-routable IP addresses unless the page itself came from a non-routable IP address. Not that that's a fix, but it definitely helps mitigate the issue.
[ Parent
| on HN ]
Re:Privacy Router Anonabox Gets $600K in Crowdfunding and Hu...
by fulafel on Tuesday October 21, 2014 @09:09AM
(#8487102)
I just tested Firefox and Chrome, both made a HTTP request successfully to my laptop's rfc1918 address referenced from a web page on the internet. Maybe you are thinking of IE's "zones" feature?