The browser could refuse to connect to localhost. I think there are browsers tha... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		codedokode 54 days ago \| parent \| context \| favorite \| on: Covert web-to-app tracking via localhost on Androi... The browser could refuse to connect to localhost. I think there are browsers that refuse (i.e. to prevent attacking a router config interface).

iforgotpassword 54 days ago [–]

I doubt anyone is running a browser on their router.

But still, you could do the same for stun, turn, sdp. Disallow local host.

jeroenhd 54 days ago | [–]

That's literally what browsers have done (for STUN) and are working on (for TURN).

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact