HN discussion: https://news.ycombinator.com/item?id=41184219

But nothing new:

https://research.nccgroup.com/2023/04/27/state-of-dns-rebind...

https://github.com/nccgroup/singularity/wiki/Protection-Bypa...

I believe uBlockOrigin browser extension has a filter to restrict local access

thanks for those refs!

This is not a zero day. The 0.0.0.0 bypass has been documented for a while now[1], including PNA bypass[2].

[1] https://github.com/nccgroup/singularity/wiki/Protection-Bypa...

[2] https://research.nccgroup.com/2023/04/27/state-of-dns-rebind...