Hacker News Reader

If a bad actor get access to my LAN, rebooting my Google Home device is the least of my concerns.

> "I am genuinely shocked by how poor the overall security of these devices are"

If there's a remote access exploit in the wild, then I'm going to be worried.

This looks like you could potentially hit from the browser with a DNS rebinding attack, just by visiting a website. (Although I'm not sure how far modern browsers defend against those by themselves)

I don’t think they do protect themselves https://twitter.com/bcrypt/status/955621661126008832

OpenWRT's DNS server (dnsmasq) has DNS rebinding attack mitigations you can turn on. I'm not sure if they're on by default or not...

Reply on news.ycombinator.com