221–230 of 254 posts
Imagine if this meant not being able to send or receive currency.
Has there ever been a major bitcoin or ethereum, or stellar outage?
Do we need a 'Show Outage:' tag? HN seems to become the defacto outage reporting place...
Earlier quoted context omitted.
Solid advice. I had fail2ban installed and enabled. SSHD Root/password login turned off and only ssh key had access. My firewall was also airtight, or so I thought. Clearly I mucked up a config or setting somewhere because the odds of someone getting past all that are extremely low. One thing I had not prepared for was IP spoofing which I learned can be prevented with a few net.ipv4.conf tweaks. I also just purchased…
How did you discover the breach, and did you determine the vector? My guess is that it was a pivoted breach from another system on the LAN such as your PC.
Earlier quoted context omitted.
I highly recommend installing fail2ban to automatically firewall IPs with consecutive failed attempts, or if possible, disable password authentication altogether and use key auth.
You can also setup a VPN and limit all port 22 activity to your VPNs IP.
Earlier quoted context omitted.
I highly recommend installing fail2ban to automatically firewall IPs with consecutive failed attempts, or if possible, disable password authentication altogether and use key auth.
Solid advice. I had fail2ban installed and enabled. SSHD Root/password login turned off and only ssh key had access. My firewall was also airtight, or so I thought. Clearly I mucked up a config or setting somewhere because the odds of someone getting past all that are extremely low. One thing I had not prepared for was IP spoofing which I learned can be prevented with a few net.ipv4.conf tweaks. I also just purchased…
Do you have a handy link for more info about that?
`rp_filter`? https://www.slashroot.in/linux-kernel-rpfilter-settings-reve...
Earlier quoted context omitted.
Anecdata is always funny because I hardly know anyone that uses debit. Credit all the way.
Why is that? What's some advantages of having a credit card versus a debit one?
Would you rather have someone thieve a dollar from your wallet or fraudulently assign you a debt?
Earlier quoted context omitted.
> Certainly makes me wonder if those are on a more prioritized and entirely separate infra and SLA that is designed to be more resilient and highly available. There's absolutely no doubt that the ads are served differently. Think about it this way: - Ads: Small number, each served to many people, funded with real cash, but you can't get the cash if you don't serve the ads. - Photos: Large number, each served to few p…
Images:. Serve requested image. Ads:. Conduct an auction in milliseconds between hundreds of parties between hundreds of millions of ad creatives with lots of very large in-memory machine learning systems, all to decide which ad to serve to maximize revenue. Different problem entirely.
Earlier quoted context omitted.
> some couldn't even buy gas. How culture changes perspectives! Over here in Europe I was thinking "doesn't sound so bad". Then I realised over in the US, gas means petrol, and without petrol America doesn't work. I'll reply to any replies after I've taken the electric train home.
You're not being fair to Europe's very impressive contributions. After all, European companies lead the way in the production of rolling pollution machines, aka ICE vehicles. Besides, the US has cleaner air than most of Europe, thanks to the intense diesel particulate pollution across European cities. Who can forget the infamous Paris smog photos from a few years ago (which is still an ongoing problem)? Don't worry t…
Earlier quoted context omitted.
How did you discover the breach, and did you determine the vector? My guess is that it was a pivoted breach from another system on the LAN such as your PC.
I'm still picking up the pieces but from my logs I can see that hundreds of successive login attempts were made from different IPs, effectively circumventing fail2ban with what I can only assume is some form of automated IP spoofing. I'm hoping that strict ipv4 settings and ssh ip range restrictions will mitigate this in the future. I also used this python script to harden my SSH security with better algorithms. http…
Earlier quoted context omitted.
I highly recommend installing fail2ban to automatically firewall IPs with consecutive failed attempts, or if possible, disable password authentication altogether and use key auth.
You can also setup a VPN and limit all port 22 activity to your VPNs IP.