Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A proposal to restrict sites from accessing a users’ local network

github.com

Post reply on HN
Print view View original

391–392 of 392 posts

Re: A proposal to restrict sites from accessing a users’ local network

#391

Post by pabs3 »

shantnutiwari wrote: post #214
nothrabannosir wrote: post #174

Earlier quoted context omitted.

In iOS you can share a subset of your contacts. This is functionally equivalent and works as you described for WhatsApp.

>In iOS you can share a subset of your contacts. the problem is, the app must respect that. WhatsApp, for all the hate it gets, does . "Privacy" focused Telegram doesnt-- it wouldnt work unless I shared ALL my contacts-- when I shared a few, it kept complaining I had to share ALL

How does Telegram know that the subset you gave access to isn't ALL the contacts? Seems like iOS should not leak that bit of info to the app.

Re: A proposal to restrict sites from accessing a users’ local network

#392

Post by mixmastamyk »

kuschku wrote: post #101
michaelt wrote: post #97

Earlier quoted context omitted.

I don't think this proposal will stop you visiting the management UI for devices like switches and NASes on the local network. You'll be able to visit http://192.168.0.1 and it'll work just fine? This is just about blocking cross-origin requests from other websites. I probably don't want every ad network iframe being able to talk to my router's admin UI.

That's not what I'm talking about. A common example is this: 1. I visit ui.manufacturer.tld 2. I click "add device" and enter 192.168.0.230, repeating this for my other local devices. 3. The website ui.manufacturer.tld now shows me a dashboard with aggregate metrics from all my switches and routers, which it collects by fetch(...) ing data from all of them. The manufacturers site is just a static page. It stores the…

Ok to exist. Put behind a permission.
Post reply on HN