#social 2016-10-12

2016-10-12 UTC
KevinMarks, jasnell, tantek, KevinMarks2 and shepazu joined the channel
#
Loqi Rhiaro made 3 edits to [[Socialwg/2016-10-11]] https://www.w3.org/wiki/index.php?diff=100359&oldid=100307
#
Loqi Rhiaro made 3 edits to [[Socialwg/2016-10-11-minutes]] https://www.w3.org/wiki/index.php?diff=100368&oldid=0
#
Loqi Scapadis made 2 edits to [[Socialwg/LDN CR Transition Request]] https://www.w3.org/wiki/index.php?diff=100352&oldid=100343
#
Loqi Tantekelik made 4 edits to [[Socialwg/2016-10-11]] https://www.w3.org/wiki/index.php?diff=100374&oldid=100350
#
Loqi Tantekelik made 2 edits to [[Socialwg/2016-10-18]] https://www.w3.org/wiki/index.php?diff=100380&oldid=0
#
Loqi Tantekelik made 2 edits to [[Socialwg]] https://www.w3.org/wiki/index.php?diff=100379&oldid=100310
#
Loqi Cwebber2 made 1 edit to [[Socialwg/2016-10-11]] https://www.w3.org/wiki/index.php?diff=100358&oldid=100357
#
aaronpk good morning loqi
#
cwebber2 morning, *
#
Loqi Rhiaro made 1 edit to [[Socialwg/2016-10-11-minutes]] https://www.w3.org/wiki/index.php?diff=100405&oldid=100368
#
aaronpk whoa the respec button changed
jasnell, shepazu, tantek, ben_thatmustbeme, timbl and KevinMarks joined the channel
#
cwebber2 btw
#
cwebber2 we've had plenty of conversation in the social wg about protecting localhost
#
cwebber2 some of you may be interested that a security issue I uncovered just had a fix put out that's about this very topic https://savannah.gnu.org/forum/forum.php?forum_id=8705
#
cwebber2 the crux of it is: many projects assume that localhost is only accessible by its own machine, but there are attacks (especially on any machine using a browser, though probably any client/server making http requests is vulnerable) which make it so you can access information on localhost anyway.
#
cwebber2 dns rebinding attacks especially
#
cwebber2 aaronpk: rhiaro: csarven: ^^^ you may find interesting, esp given you've all had to look at the "what touches localhost" stuff
KevinMarks2, shepazu_, timbl, shepazu, KevinMarks, jasnell and ben_thatmustbeme joined the channel