Simon Willison’s Weblog

Blogmarks tagged dnsrebinding in Aug, 2007

Filters: Type: blogmark × Year: 2007 × Month: Aug × dnsrebinding ×


(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino. # 2nd August 2007, 12:53 pm

Your browser is a tcp/ip relay. Thoroughly nasty new(ish) attack that breaks the same-domain policy and allows intranet content to be stolen by a malicious site. Using virtual hosts (hence requiring the Host: header) is the best known protection. # 2nd August 2007, 12:53 pm

Types

Years

Months

Tags