"Since looking into it, I noticed that uBlock Origin already has the default list "Block Outsider Intrusion into LAN" but it wasn't enabled."
Never knew that this existed. Thank you!
Ask HN: Why does the US Visa application website do a port-scan of my network?
91–100 of 269 posts
Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#92Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#93How and why do browsers allow this? Why wouldn't the browser ask for permission in the same way that it does for Microphone access? It's insane to allow any random website to port scan my LAN. If this wasn't a "feature", I would have considered this a high severity vulnerability
Chrome doesn't allow it - local network services have to opt-in to being fetchable from public sites (https://github.com/WICG/private-network-access), although they're replacing it with a user-permission-based approach (https://github.com/WICG/local-network-access).
(There is some language online suggesting PNA has not actually shipped, but I experienced it myself in stable Chrome several years ago, so I am unsure of the current state).
Firefox doesn't implement either approach -- I assume this is indicative of their lack of development resources.
Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#94Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#95How and why do browsers allow this? Why wouldn't the browser ask for permission in the same way that it does for Microphone access? It's insane to allow any random website to port scan my LAN. If this wasn't a "feature", I would have considered this a high severity vulnerability
[deleted]
Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#96"Since looking into it, I noticed that uBlock Origin already has the default list "Block Outsider Intrusion into LAN" but it wasn't enabled." Never knew that this existed. Thank you!
Is that available in lite version too? Now that the origin js being phased out
Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#97Earlier quoted context omitted.
You are looking at it from Turkish perspective unfortunately.
I am EU citizen, I happen to know the Turkish perspective only because spent some years in Turkey and in fact it is the Turkish perspective that that EU doesn't want them and intentionally makes things harder but the moment you look at what's actually going on you see that this is not the case, just a Turkish fantasy about the "evil West and snobby Europeans". Considering that last year 50K Turks applied for asylum i…
B-visa rejection rate for Turkey in FY24, as per the US State Department, was 19.78%, btw. https://travel.state.gov/content/dam/visas/Statistics/Non-Im...
Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#98That extension has "Access your data for all websites" ... I really don't get how anyone can give that permission to anyone that isn't well known (a company with a lot on the line) or a person famous for their work (the uBO dev) who has stated he will never sell to anyone or do bad things.
"Hacks and Hops" doesn't even have a valid home page. The extension links to https://g666gle.me/ which does not exist. The domain name itself does not want to make me give access to all my data for all websites to them.
As nice as this extension seems, I would ever in a million years install it.
Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#99If would be interesting to see what happens on OpenBSD. With pledge(2) and unveil(2) in Firefox, I wonder what it would see. I expect it would see nothing.
I will give it a try and see what happens and if I see anything I will add it here.
Re: Ask HN: Why does the US Visa application website do a port-scan of my network?
#100"Since looking into it, I noticed that uBlock Origin already has the default list "Block Outsider Intrusion into LAN" but it wasn't enabled." Never knew that this existed. Thank you!
Is that available in lite version too? Now that the origin js being phased out
You can't change browser? Or is there something bigger happening?