Hacker News Reader

Full thread

dzhiurgis

And web archive indexes it's internal IP addresses and a... live printer: http://web.archive.org/web/*/http://printer

View on HN

Which from the snapshot, shows an IP that's... still online: http://208.70.27.164/hp/device/this.LCDispatcher

Yep. A whois confirms it's their IP address.

Which is nothing wrong on it's own, as long it's protected by good password and doesn't fail to likes of thc-hydra.

They also had some ancient snapshots from 192.xxx range

And it appears to have been jammed since 2009.

Ouch. Stuff like this is just a confused deputy security vulnerability waiting to happen. Whenever I write code to fetch a resource based on user input (and a crawler following a link is a form of user input) I check to make sure I'm not going to fetch something on an internal network.

Reply on news.ycombinator.com