logoalt Hacker News

redox99yesterday at 3:06 AM1 replyview on HN

Wow, this is an extremely serious vulnerability. People writing it off because it requires MitM. There's always a MitM, the internet is basically a MitM.


Replies

webstrandyesterday at 3:14 AM

MitM isn't even necessary, a rogue DHCP server configuring a malicious DNS could attack this.

show 2 replies