> Hey Piranna. I think that it is not allowed because of security issues.
> Think for example what would happen if you have some kind of internal
> service on your computer. Think for example about a printing server.
> That server is configured to get connections only from the inside - from
> 127.0.0.1.
> What would happen if suddenly some javascript app could connect to that
> service? The security assessments when building the inner service for
> example weren't
> considering that case. That also means that anyone that writes a website
> could use your communication capabilities as a computer. These are serious
> matters I assume.
>
Nice security thread, I didn't though about it... You would start to
print random data and don't stop until get out of paper... Or generate
random data blobs and download them, filling the user hard disk...


> Do you have an idea for an alternative solution?
>
Honestly no, that's why I asked for advice... :-/ There are things
like PageKite (https://pagekite.net/) or +PeerServer
(http://www.peer-server.com/), this last one fairly similar to some
ideas I had for extend my P2P framework (and the reason I've spend the
last months looking for a server-less handshake channel), but there's
currently nothing standard or that can be used by free or
anonimously... :-/


-- 
"Si quieres viajar alrededor del mundo y ser invitado a hablar en un
monton de sitios diferentes, simplemente escribe un sistema operativo
Unix."
– Linus Tordvals, creador del sistema operativo Linux
_______________________________________________
p2p-hackers mailing list
[email protected]
http://lists.zooko.com/mailman/listinfo/p2p-hackers

Reply via email to