Hacker News new | past | comments | ask | show | jobs | submit login

I've used localtunnel quite a bit for quickly sharing a local dev server with a coworker and other things of that nature, but I noticed that after leaving a tunnel open for a while I would see requests from unfamiliar IP addresses.

It turns out this is because localtunnel reuses tunnel ids. Given how small the id space is, it's also possible that there are people who scan localtunnel URLs looking for interesting servers.

Keep this in mind before using localtunnel for anything you don't want the world to see.




I just started using localtunnel and this seems a bit worrying.

It seems that a change to line 40 in server.py (https://github.com/progrium/localtunnel/blob/d5eca8bab37f324...) could lengthen the subdomain.


yep, i never expected this much usage. this will be taken care of.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: