Simon Willison’s Weblog

(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino.

# 2nd August 2007, 12:53 pm / camino, dnsrebinding, safari, samedomain, security

Your browser is a tcp/ip relay. Thoroughly nasty new(ish) attack that breaks the same-domain policy and allows intranet content to be stolen by a malicious site. Using virtual hosts (hence requiring the Host: header) is the best known protection.

# 2nd August 2007, 12:53 pm / arturbergman, dnsrebinding, samedomain, security

IE vulnerability allows cookie stealing. Full exploit against the same-domain cookie origin policy, so malicious sites can steal cookies from elsewhere. Avoid using IE until this is patched.

# 6th June 2007, 9:53 am / cookies, ie, samedomain, security