New ‘Meow’ attack has deleted almost 4k unsecured databases

Post by Sebb767 » Tue, Jul 28, 2020, 9:48 AM UTC

BrandoElFollito wrote: post #497

BrandoElFollito wrote: post #496

Earlier quoted context omitted.

I do not understand what you mean by "priority over the system ones" A docker container can have internal ports exposed explicitly, or use host networking. In any case these are ports exposed by the docker-proxy executable - an executable like any other on the system. Then come the iptables rules of the system (which open or not data flow to the ports exposed by docker-proxy). Or is it different?

Ah, now I get what you mean - that entries such as ACCEPT tcp -- anywhere 172.19.0.10 tcp dpt:8843 are created by docker, independently from the configuration of iptables themselves.

Post by pmarreck » Wed, Aug 05, 2020, 2:18 PM UTC

pessimizer wrote: post #234

glenstein wrote: post #208

Earlier quoted context omitted.

Why is the person doing the deleting so low, relatively speaking, in your ranking of people's responsibility for them doing the deleting? Also, do you think that this person or persons would refrain from deleting the data if they had the opportunity, but it qualified as a "good idea" to keep online? I.e. they might review, say, medical records, spend some time thinking to themselves whether it was 'necessary' to be o…

For me, it's because the odds of this person showing up quickly approach 1 as time approaches infinity, and that person's effect would be nil if it weren't for necessary causes 1) through 19). Blaming the person that hacked you is like blaming the individual rock that sinks your boat when you navigate too close to a rocky shore. The rock may have done 100% of the damage to your boat, but if it hadn't been that rock,…