[vlc-devel] [PATCH 9/9] lua: http: Announce the web interface over mdns

[Pierre Ynard]

> To the best of my knowledge, MDNS or multicast in general is limited
> to your LAN, so I fail to see the change in the order of magnitude
> here.

It's received by any smartphone / STB / CPE / Alexa / node on the LAN.
Any application installed on them that borders on spyware or is straight
spyware can passively collect that data and send it away. Any Alexa Echo
/ Google Home device from a tech giant privy on big data, or CPE from
an unscrupulous ISP, can sniff it and put it in their databases. Any
government controlling smartphone / device hardware or OS of any node on
the LAN can abuse it as a surveillance / attack vector. Any compromised
node on the LAN can passively collect and report that data without being
noticed.

Once the data was collected and extracted out of the LAN, legitimately
or not, it can be further compromised and exploited.

-- 
Pierre Ynard
"Une âme dans un corps, c'est comme un dessin sur une feuille de papier."