[Openurmind]

“Oligo Security’s research team has discovered a “0.0.0.0 Day” vulnerability that >affects Google Chrome/Chromium, Mozilla Firefox and Apple Safari browsers<, enabling websites to communicate with software running on MacOS and Linux systems (via The Hacker News).”

Isn’t this the fault of the Browser allowing it not the OS? Isn’t it the responsibility of a browser to keep the OS it was versioned for insulated? Pretty hard to pin this one on the OS because the browser devs left a hole open in particular versions.

[ShadowAce]

The good news, if you're a Windows user at least, is that Microsoft's OS blocks 0.0.0.0 at a system level.

If one OS blocks it, it's pretty hard to NOT blame the OS...

It does seem like a browser exploit though.

[Dr. Sivana]

Isn’t this the fault of the Browser allowing it not the OS? Isn’t it the responsibility of a browser to keep the OS it was versioned for insulated?

Safari is an Apple product, mostly for Mac OS and iOS iPad OS, so that's on Apple. Serious Linux folks can block 0.0.0.0 at the system level and they don't need a browser update to do it. The only question is whether it should be blocked by default.