Page MenuHomePhabricator

Loopback user activity
Open, Needs TriagePublic

Description

http://www.shoutwiki.com/w/index.php?title=Special:AbuseLog&wpSearchUser=127.0.0.1
... shows that an unregistered user attempted to create spam pages. Although it's possible to spoof the TCP source address of a packet as anything, it's not possible to establish a TCP session that way. Ordinarily only someone logged in to the OS should have access to the loopback interface. A locally running proxy is another possibility, if it exists. Either way, it warrants investigation.

Event Timeline

Saftzie created this task.Feb 12 2020, 6:54 PM
Saftzie added a project: Restricted Project.Feb 12 2020, 6:59 PM

BTW, there appears to be no such thing as a #security tag in this phabricator ....