logoalt Hacker News

redox99today at 3:06 AM1 replyview on HN

Wow, this is an extremely serious vulnerability. People writing it off because it requires MitM. There's always a MitM, the internet is basically a MitM.


Replies

webstrandtoday at 3:14 AM

MitM isn't even necessary, a rogue DHCP server configuring a malicious DNS could attack this.

show 2 replies