13h ago

Firefox Blocks 0.0.0.0 IP Addresses: Tell Us What This Means To You!

connect.mozilla.org Firefox Blocks 0.0.0.0 IP Addresses: Tell Us What This Means To You!

In response to 0.0.0.0 day, Firefox Nightly version 131 had introduced a new security measure: blocking access to 0.0.0.0/::/::ffff:0.0.0.0 addresses. This change is currently live for Nightly users and will be gradually rolled out to all release users in the near future. Before we implement this ch...

31 comments

Shit I used it access the interdimensional cable TV.

The linked blog post explains about the vulnerability, I thought it was quite interesting.

I didn't even realize 0.0.0.0 was a valid address to enter into a browser! TIL.
- On Linux it is just a catch all address (listen on all interfaces)
  Elsewhere it doesn't do anything since I don't believe it is part of the networking standards
  
  Yeah I'm familiar with that part, I just meant in context of a browser being able to connect to it.

What is the use case for 0.0.0.0
- 0.0.0.0 binds to all addresses on the machine for servers, but I don't know what a browser would do when trying to resolve it. I guess look at all addresses on the machine and see if anything has bound to the indicated port on that address? First one it finds wins?
- Just in case you want to do nothing, nowhere in particular.

I just wish they'd stop blocking http requests on lan addresses honestly.
- Do you have standard Firefox with default options that does this? This has not been my experience.
  You could try out with a new profile if it works out the same.
  
  I just tried to use the Developer version. With no addons.
- Pretty sure you have an addon doing that, because Firefox doesn't.
  
  Firefox Developer with no addons
- Firefox doesn't block http at all
  
  Try the Firefox Developer version. No addons.
- Could you share a link for me to read up more on this?
  
  I was trying to use the Firefox Developer version. Just straight up refused.

Fine by me. I self-host a lot of stuff but never used 0.0.0.0 for browsing, so I just disabled it here to try it out.

seriously. I like the federation but people way overuse the spoiler tag or nsfw or whatever. I usually skip over but had to vent. Oh uh. ankle in this one. better make sure no one gets fired over it.
- Did you mean to comment on this post? It's not showing as NSFW to me
  
  It shows an 18+ tag for me too, and the image is blurred. I assume it's because of our host software. I'm on kbin.melroy.org (Mbin), and the original commenter is on moist.catsweat.com (also Mbin).
- wrong post?

31 comments