[Javascript] Forward image via http with ajax
Mike Dougherty
mdougherty at pbp.com
Sat Feb 3 15:35:55 CST 2007
I think that's strong language for this situation. Terry has a legitimate problem to be solved.
Is the user's browser running a web accessible control interface on the camera? You mentioned
that they have the ability to pose before taking the picture - I presume this is done via a web
app built into the camera.
Is there a feature on the IP camera to push images to a remote data store? That mechanism would
still allow an outbound connection through the local router to a device/network that you DO
control. If the camera doesn't support that technology then I suspect Scott's intent is correct
even if the tone is a bit harsh.
On Sat, 3 Feb 2007 14:09:35 -0600
Scott Reynen <scott at randomchaos.com> wrote:
> I believe what you want to do is impossible. If it's not, it should be, as it would allow a
>JavaScript to funnel content from a private LAN (presumably private to prevent just such
>funneling) to a remote server without user approval. To avoid this kind of security problem,
>JavaScript can only load content from servers within the same domain as the JavaScript itself.
> If that domain is the web server (4), you won't be able to load data from the IP camera (1).
> If that domain is the IP camera (1), you won't be able to send the data to the web server (4).
> If you want to steal images from an unwilling LAN, I think (hope) you'll at least need a
>co-conspirator within the LAN.
More information about the Javascript
mailing list