Discussion

DigitalOcean DNS/ARP Exposure

I'm not sure if this is an issue or not, but I noticed that running tcpdump on a DigitalOcean droplet shows you ARP and DNS requests. This lets you get a list of machines hosted by DigitalOcean... I might be way off here, but could this make DO vulnerable to ARP spoofing?

Made a quick video to demonstrate what I mean: http://www.youtube.com/watch?v=gmNaJCkGFOw

2 points JosephRedfern 13 years ago 4 comments

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton