Re:How to steal a developer's local database
by d0mine on Thursday September 01, 2016 @03:54PM
(#12408342)
To choose an ip address from 127.0.0.0/8 subnet randomly in Python 3:
>>> import ipaddress
>>> import random
>>> ipaddress.IPv4Address('127.0.0.1') + random.randrange(2**24 - 2)
IPv4Address('127.23.181.175')
Re:How to steal a developer's local database
by wcarron27 on Wednesday September 14, 2016 @02:55PM
(#12500133)
Hey, I know I'm a bit late to the party. But I'm looking to protect my company's redis instance from these attacks and your approach looks very promising. Things is, I don't know what to do now that I've written a similar script. Where should I use this code? In the redis.conf file?
Bear in mind, I'm a front end developer, so this is absolutely not my forte. Thanks for the help.
Re:How to steal a developer's local database
by _RPM on Thursday September 01, 2016 @05:30PM
(#12409053)
Nice use of __add__ operator over loading here
Re:How to steal a developer's local database
by fizzbatter on Thursday September 01, 2016 @05:05PM
(#12408872)
I really appreciate this code example. I've been using 127.0.0.1 for all my local dev stuff, relying on ports. This is pretty awesome!
Re:How to steal a developer's local database
by JonnieCache on Thursday September 01, 2016 @02:57PM
(#12407935)
Is there a way to make root a requirement for binding to 0.0.0.0 though?
It's pretty much always a command line flag or config file parameter.
If you're running with docker, it's even more standard. When you expose a port, just use `-p 127.12.12.3:11211:11211` (with your chosen IP address, of course), and docker will set up the forwarding for you, only for that address.