Simon Willison’s Weblog

(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino.

Posted 2nd August 2007 at 12:53 pm

Recent articles

Wilson Lin on FastRender: a browser built by thousands of parallel agents - 23rd January 2026
First impressions of Claude Cowork, Anthropic's general agent - 12th January 2026
My answers to the questions I posed about porting open source code with LLMs - 11th January 2026

camino 6 dnsrebinding 2 safari 43 samedomain 3 security 573

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe