Re:Show HN: Wallarm – Protect your web apps or APIs with fas...
by hkr_mag on Wednesday June 29, 2016 @07:30PM
(#12005615)
Lot's of stories happening right away. Don't get the reason for the negativity. Though here is a recent story — critical XXE with remote file reading at LinkedIn (http://blog.wallarm.com/post/145883562288/critical-linkedin-...)
[ Parent
| on HN ]
Re:Show HN: Wallarm – Protect your web apps or APIs with fas...
by ryanlol on Wednesday June 29, 2016 @09:34PM
(#12006033)
This blog post has nothing to do with your product. Also, stopping a single request is very different from stopping an attack. A real attacker isn't going to stop the first time they get blocked, and if possible they'll probably end up evading your WAF.
Re:Show HN: Wallarm – Protect your web apps or APIs with fas...
by hkr_mag on Wednesday June 29, 2016 @10:18PM
(#12006189)
It absolutely has. The vulnerability was detected with a vulnerability scanner built in Wallarm. As for detection of attacks, in many cases, it's much easier to identify the attacker when he runs several requests than to stop only one request with a ready-to-use 0day exploit. And what's even more important, you need help to fix vulnerability unless attacker discovers it and find the way to evade WAF