Page MenuHomePhorge

Loopback user activity
Open, Needs TriagePublic

... shows that an unregistered user attempted to create spam pages. Although it's possible to spoof the TCP source address of a packet as anything, it's not possible to establish a TCP session that way. Ordinarily only someone logged in to the OS should have access to the loopback interface. A locally running proxy is another possibility, if it exists. Either way, it warrants investigation.

Event Timeline

Saftzie added a project: Restricted Project.Feb 12 2020, 6:59 PM

BTW, there appears to be no such thing as a #security tag in this phabricator ....

Saftzie removed a project: Restricted Project.Jun 25 2020, 11:58 PM