Hacker News new | ask | show | jobs
by praseodym 3865 days ago
So there is no authentication on the API endpoint? I have my PS4 connected directly to the Internet to avoid NAT issues, and I wonder whether the API would be available openly as well.
3 comments

Theorically, knowing your ip, people would be able to connect to your fallout 4.
Or practically, if they would scan the entire IPv4 space, which doesn't take too long on a decent connection (5min with 10Gbps, https://zmap.io/)
Wonder if any relevant strings have shown up in Shodan searches yet.

Still, I'd imagine most PCs and game consoles are behind a firewall and ports aren't forwarded.

why not telnet to it? <yourip>:28000
Since most people have their console running behind a firewall, this should not be an issue. Unless you expose those ports to the outside world...