[Settle] Re: Firefox and local network access

[Michael Richardson <[e-mail]>]

Paul Wouters <paul=[e-mail]> wrote:
    > There was a talk at fosdem by Sunil Mayya that relates to security of local network resources in the browser:

    > This talk presents Local Network Access (LNA) standards and how it
    > addresses similar threats and helps fix long standing security
    > vulnerabilities with localhost and local network devices. The talk
    > explains the LNA specification and how it categorizes network requests
    > into public, local, and loopback address spaces, requiring explicit
    > user permission when websites access more private network zones. The
    > presentation covers Firefox's implementation, key differences from
    > Chrome's approach, real-world deployment challenges and mitigations.

This was very intersting, thank you for sharing it.
FOSDEM is so big, you can never see more than 10%.

I reached out to Sunil to tell him about SETTLE.
Once of his slides suggests that there is malware out there that attacks home
routers from the inside, presumably http to default route, login admin/admin.
I've figured such things were coming, but I was unaware that it was already here.

    > https://fosdem.org/2026/schedule/event/QCSKWL-firefox-local-network-access/


--
Michael Richardson <[e-mail]>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide