Time Table

No Context, No Consent: A Systematic Analysis of LNA Bypasses in Firefox’s Internal Request Paths

Local Network Access assumes the browser knows which page started a request. Internal browser features routinely lose that context, and the check then permits what it should block. Using Firefox as a case study, this talk presents nine such paths, three recurring patterns, and one fix covering them all.

Location :
- Track 2(HALL A)
Category :
- U25
Share :

Speakers

Rintaro Kawasugi

川杉倫太郎

Rintaro Kawasugi, also known as singetu0096, is a second-year high school student in Japan, a security researcher, and a CTF player.

He specializes in web security and has achieved excellent results in many CTF competitions.

He also specializes in networking and, leveraging his experience developing authoritative DNS servers specifically for GSLB, he researches protocol-level security.

Rintaro Kawasugi, also known as singetu0096, is a second-year high school student in Japan, a security researcher, and a CTF player.

He specializes in web security and has achieved excellent results in many CTF competitions.

He also specializes in networking and, leveraging his experience developing authoritative DNS servers specifically for GSLB, he researches protocol-level security.

Back to Time Table