Simon Willison’s Weblog

2nd August 2007 - Link Blog

(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino.

Posted 2nd August 2007 at 12:53 pm

Recent articles

The Axios supply chain attack used individually targeted social engineering - 3rd April 2026
Highlights from my conversation about agentic engineering on Lenny's Podcast - 2nd April 2026
Mr. Chatterbox is a (weak) Victorian-era ethically trained model you can run on your own computer - 30th March 2026

This is a link post by Simon Willison, posted on 2nd August 2007.

camino 6 dnsrebinding 2 safari 43 samedomain 3 security 594

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe