{"id":8912,"date":"2020-06-03T13:08:47","date_gmt":"2020-06-03T17:08:47","guid":{"rendered":"https:\/\/irreal.org\/blog\/?p=8912"},"modified":"2020-06-03T13:08:47","modified_gmt":"2020-06-03T17:08:47","slug":"more-on-the-websockets-port-scanning","status":"publish","type":"post","link":"https:\/\/irreal.org\/blog\/?p=8912","title":{"rendered":"More on the Websockets Port Scanning"},"content":{"rendered":"

This is a short update to my Websockets: Why We Can\u2019t Have Nice Things<\/a> post. That post discussed a tactic used by several Web sites that uses Websockets to scan for open localhost<\/code> ports. There was some speculation that this was in service of an attempt to determine if remote processes were running on the computer, a security risk. Whatever the original purpose, Steve Stagg discovered that it was possible to connect to these ports and recover possibly sensitive data.<\/p>\n

Bleeping Computer<\/a> has an update on the matter<\/a> that among other things lists some or all of the sites using this tactic. Their article also sheds light on the reason for the port scanning. It turns out that\u2014at least on the part of the major sites\u2014it is<\/i> a security measure. You can read their article for the details but the TL;DR is that they\u2019re all running a script from Lexis Nexis\u2019 Threat Matrix<\/a> service that performs the port scanning.<\/p>\n

I expect that the browser manufacturers will soon put an end to this\u2014especially in light of Stagg\u2019s revelations\u2014and, in fact, it\u2019s already possible to disable it in Firefox. In the mean time, I doubt that this is really anything to worry about. It\u2019s more about the audacity of Web sites thinking they have the right to run any code they want on our<\/i> machines. Just imagine their response if we uploaded code to their servers to help prevent the download of malware. This sort of thing really needs to be made illegal.<\/p>\n","protected":false},"excerpt":{"rendered":"

This is a short update to my Websockets: Why We Can\u2019t Have Nice Things post. That post discussed a tactic used by several Web sites that uses Websockets to scan for open localhost ports. There was some speculation that this … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[3],"class_list":["post-8912","post","type-post","status-publish","format-standard","hentry","category-general","tag-security"],"_links":{"self":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8912","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8912"}],"version-history":[{"count":1,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8912\/revisions"}],"predecessor-version":[{"id":8913,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8912\/revisions\/8913"}],"wp:attachment":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8912"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8912"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8912"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}