Private Network - Revision history

Tom: /* Solutions */

2023-10-27T05:21:15Z

‎Solutions

Tom: /* Solutions */

2023-10-27T05:18:50Z

‎Solutions

Tom: /* Solutions */

2023-10-27T05:17:14Z

‎Solutions

Tom: /* Solutions */

2023-10-27T05:13:23Z

‎Solutions

Tom: /* References */

2022-10-08T17:36:45Z

‎References

Tom: /* Solutions */

2022-10-08T17:35:31Z

‎Solutions

Tom: /* Solutions */

2022-10-08T17:31:12Z

‎Solutions

Tom: /* Solutions */

2022-01-18T01:42:38Z

‎Solutions

Tom: Created page with "==Full Title or Meme== Traditionally corporate networks were private and relied on firewalls to protect uses from attacks from the open Internet. ==Context== Times have chang..."

2022-01-18T01:42:11Z

Created page with "==Full Title or Meme== Traditionally corporate networks were private and relied on firewalls to protect uses from attacks from the open Internet. ==Context== Times have chang..."

New page

==Full Title or Meme==
Traditionally corporate networks were private and relied on firewalls to protect uses from attacks from the open Internet.

==Context==
Times have changed and each computer now comes with a firewall protecting it from the open internet, which is all that computers see when traveling.

==Problems==
* Now attackers are using browsers to access devices inside the user's home networks.

==Solutions==
https://arstechnica.com/information-technology/2022/01/new-chrome-security-measure-aims-to-curtail-an-entire-class-of-web-attack/ New Chrome security measure aims to curtail an entire class of Web attack] (2022-01-13) Hackers have long used browsers as a beachhead. Google aims for PNA to change that.

==References==

[[Category: Glossary]]

@@ Line 10: / Line 10: @@
 ==Solutions==
 * [https://github.com/WICG/private-network-access/blob/main/explainer.md Explainer: Private Network Access] is continually updated in place.<blockquote> Private Network Access is a web specification which aims to protect websites accessed over the private network (either on localhost or a private IP address) from malicious requests from websites located outside the private network. Say you visit evil.com, we want to prevent it from using your browser as a springboard to hack your printer. Perhaps surprisingly, evil.com can easily accomplish that in most browsers today (given a web-accessible printer exploit). This specification used to be named "CORS-RFC1918" , after CORS, which provides a mechanism for securing websites against cross-origin requests, and RFC 1918, which describes IPv4 address ranges reserved for private networks.</blockquote>
 * [https://arstechnica.com/information-technology/2022/01/new-chrome-security-measure-aims-to-curtail-an-entire-class-of-web-attack/ New Chrome security measure aims to curtail an entire class of Web attack] (2022-01-13) Hackers have long used browsers as a beachhead. Google aims for PNA to change that. <blockquote>For more than a decade before 2020, the Internet has remained vulnerable to a class of attacks that uses browsers as a beachhead for accessing routers and other sensitive devices on a targeted network. Now, Google is finally doing something about it. Starting in Chrome version 98, the browser will begin relaying requests when public websites want to access endpoints inside the private network of the person visiting the site. For the time being, requests that fail won't prevent the connections from happening. Instead, they'll only be logged. Somewhere around Chrome 101—assuming the results of this trial run don't indicate major parts of the Internet will be broken—it will be mandatory for public sites to have explicit permission before they can access endpoints behind the browser</blockquote>
 * [[Virtual Private Network]]s (VPNs) have given computers the ability to join a remote network as though they were physically attached to that network. {https://www.cnet.com/tech/mobile/with-pixel-7s-built-in-vpn-googles-giving-you-a-security-boost/ Google Announced] on 2022-20-06 that their Pixel [[Smartphone]]s would come with a VPN built in.

@@ Line 9: / Line 9: @@
 ==Solutions==
-* [https://github.com/WICG/private-network-access/blob/main/explainer.md Explainer: Private Network Access] is continually updated in place.<blockquote> Private Network Access is a web specification which aims to protect websites accessed over the private network (either on localhost or a private IP address) from malicious requests from websites located outside the private network. Say you visit evil.com, we want to prevent it from using your browser as a springboard to hack your printer. Perhaps surprisingly, evil.com can easily accomplish that in most browsers today (given a web-accessible printer exploit).</blockquote>
+* [https://github.com/WICG/private-network-access/blob/main/explainer.md Explainer: Private Network Access] is continually updated in place.<blockquote> Private Network Access is a web specification which aims to protect websites accessed over the private network (either on localhost or a private IP address) from malicious requests from websites located outside the private network. Say you visit evil.com, we want to prevent it from using your browser as a springboard to hack your printer. Perhaps surprisingly, evil.com can easily accomplish that in most browsers today (given a web-accessible printer exploit). This specification used to be named "CORS-RFC1918" , after CORS, which provides a mechanism for securing websites against cross-origin requests, and RFC 1918, which describes IPv4 address ranges reserved for private networks.</blockquote>
 * [https://arstechnica.com/information-technology/2022/01/new-chrome-security-measure-aims-to-curtail-an-entire-class-of-web-attack/ New Chrome security measure aims to curtail an entire class of Web attack] (2022-01-13) Hackers have long used browsers as a beachhead. Google aims for PNA to change that. <blockquote>For more than a decade before 2020, the Internet has remained vulnerable to a class of attacks that uses browsers as a beachhead for accessing routers and other sensitive devices on a targeted network. Now, Google is finally doing something about it. Starting in Chrome version 98, the browser will begin relaying requests when public websites want to access endpoints inside the private network of the person visiting the site. For the time being, requests that fail won't prevent the connections from happening. Instead, they'll only be logged. Somewhere around Chrome 101—assuming the results of this trial run don't indicate major parts of the Internet will be broken—it will be mandatory for public sites to have explicit permission before they can access endpoints behind the browser</blockquote>
 * [[Virtual Private Network]]s (VPNs) have given computers the ability to join a remote network as though they were physically attached to that network. {https://www.cnet.com/tech/mobile/with-pixel-7s-built-in-vpn-googles-giving-you-a-security-boost/ Google Announced] on 2022-20-06 that their Pixel [[Smartphone]]s would come with a VPN built in.

@@ Line 9: / Line 9: @@
 ==Solutions==
 * [https://arstechnica.com/information-technology/2022/01/new-chrome-security-measure-aims-to-curtail-an-entire-class-of-web-attack/ New Chrome security measure aims to curtail an entire class of Web attack] (2022-01-13) Hackers have long used browsers as a beachhead. Google aims for PNA to change that. <blockquote>For more than a decade before 2020, the Internet has remained vulnerable to a class of attacks that uses browsers as a beachhead for accessing routers and other sensitive devices on a targeted network. Now, Google is finally doing something about it. Starting in Chrome version 98, the browser will begin relaying requests when public websites want to access endpoints inside the private network of the person visiting the site. For the time being, requests that fail won't prevent the connections from happening. Instead, they'll only be logged. Somewhere around Chrome 101—assuming the results of this trial run don't indicate major parts of the Internet will be broken—it will be mandatory for public sites to have explicit permission before they can access endpoints behind the browser</blockquote>
 * [[Virtual Private Network]]s (VPNs) have given computers the ability to join a remote network as though they were physically attached to that network. {https://www.cnet.com/tech/mobile/with-pixel-7s-built-in-vpn-googles-giving-you-a-security-boost/ Google Announced] on 2022-20-06 that their Pixel [[Smartphone]]s would come with a VPN built in.

@@ Line 10: / Line 10: @@
 ==Solutions==
 * [https://arstechnica.com/information-technology/2022/01/new-chrome-security-measure-aims-to-curtail-an-entire-class-of-web-attack/ New Chrome security measure aims to curtail an entire class of Web attack] (2022-01-13) Hackers have long used browsers as a beachhead. Google aims for PNA to change that. <blockquote>For more than a decade before 2020, the Internet has remained vulnerable to a class of attacks that uses browsers as a beachhead for accessing routers and other sensitive devices on a targeted network. Now, Google is finally doing something about it. Starting in Chrome version 98, the browser will begin relaying requests when public websites want to access endpoints inside the private network of the person visiting the site. For the time being, requests that fail won't prevent the connections from happening. Instead, they'll only be logged. Somewhere around Chrome 101—assuming the results of this trial run don't indicate major parts of the Internet will be broken—it will be mandatory for public sites to have explicit permission before they can access endpoints behind the browser</blockquote>
-* [[Virtual Private Network]]s (VPNs) have given computers the ability to join a remote network as though they were physically attached to that network. {https://www.cnet.com/tech/mobile/with-pixel-7s-built-in-vpn-googles-giving-you-a-security-boost/ Google Announced] on 2022-20-06 that their Pixel [[SmartPhone]]s would come with a VPN built in.
+* [[Virtual Private Network]]s (VPNs) have given computers the ability to join a remote network as though they were physically attached to that network. {https://www.cnet.com/tech/mobile/with-pixel-7s-built-in-vpn-googles-giving-you-a-security-boost/ Google Announced] on 2022-20-06 that their Pixel [[Smartphone]]s would come with a VPN built in.
 ==References==

← Older revision		Revision as of 17:36, 8 October 2022
Line 15:		Line 15:

	[[Category: Glossary]]		[[Category: Glossary]]
		+	[[Category: Networking]]