search

diodechain / diode_client

Diode client written in GO that runs the Blockquick™ algorithm and a socks server to transmit data through diodechain.
https://diode.io/download
Other
65 stars 23 forks source link

Stop pipeFallback to loopback network #69

Closed sc0Vu closed 3 years ago

sc0Vu commented 3 years ago

When user enable pipeFallback to localhost, it means they can connect to the other host through diode socks server, for example we use pipeFallback to bridge web2.

It seems they can also connect to loopback network. If user open socks server to the world (listen 0.0.0.0), someone can connect to user's any local port without authentication.