· Geral
Eclair fixes vulnerability that would allow controlling Lightning nodes via browser
The Eclair implementation of the Lightning Network released an update on October 15 that blocks an attack vector where a web page could send commands to a Lightning node through cached authentication. The fix requires browser interfaces to connect through a backend, eliminating the direct route to API access. This vulnerability is relevant for anyone running an Eclair node, especially those accessing the web interface from shared or public machines. The update is recommended for all users. https://cryptoslate.com/eclair-blocks-browser-requests-that-could-let-a-webpa… Are you already running a Lightning node? Which implementation do you use?