News for hackers. Stuff that matters.

A comment on My First 10 Minutes on a Server. Parent comment

Re:My First 10 Minutes on a Server by brobinson on Wednesday June 15, 2016 @07:27PM (#11912889)
If a script or cronjob or whatever on the server has write access to the repo, so does the hypothetical attacker.

I remember seeing a "hacking" website get wiped along with all of its backups about 15 years ago and it left a very strong impression on me regarding this issue.

[ Parent | on HN ]
Re:My First 10 Minutes on a Server by jjnoakes on Thursday June 16, 2016 @07:49AM (#11915464)
If it is write access but not delete access (nor overwrite access) then there is no issue.

It is sometimes more secure to push because it requires no inbound connections or authorizations the live machine.

[ Parent | on HN ]