Simon Willison’s Weblog

(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino.

Posted 2nd August 2007 at 12:53 pm

Recent articles

Olmo 3 is a fully open LLM - 22nd November 2025
Nano Banana Pro aka gemini-3-pro-image-preview is the best available image generation model - 20th November 2025
How I automate my Substack newsletter with content from my blog - 19th November 2025

camino 6 dnsrebinding 2 safari 43 samedomain 3 security 566

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe