[vlc-devel] [PATCH 9/9] lua: http: Announce the web interface over mdns

Hugo Beauzée-Luyssen hugo at beauzee.fr
Tue Sep 8 15:23:33 CEST 2020


On Tue, Sep 8, 2020, at 2:50 PM, Pierre Ynard via vlc-devel wrote:
> _______________________________________________
> vlc-devel mailing list
> To unsubscribe or modify your subscription options:
> https://mailman.videolan.org/listinfo/vlc-devel
> Attachments:

> We can agree to disagree here. The whole point about subscribing to the
> botnet is that it moves you in scope from orders of magnitude, from
> active targeted attacks to bulk exploitation and automated worms with
> a life of their own. It's true that it would be possible, through port
> scanning, to collect databases of exploitable open VLC web interfaces to
> bring it to the bulk scale, but mass scanning from the internet doesn't
> affect LANs, and mDNS services are inheritly meant to be registered and
> listed so it just doesn't seem comparable to me.

To the best of my knowledge, MDNS or multicast in general is limited to your LAN, so I fail to see the change in the order of magnitude here.

-- 
  Hugo Beauzée-Luyssen
  hugo at beauzee.fr


More information about the vlc-devel mailing list