News for hackers. Stuff that matters.

A comment on How to steal a developer's local database. Parent comment

Re:How to steal a developer's local database by d0mine on Thursday September 01, 2016 @03:54PM (#12408342)
To choose an ip address from 127.0.0.0/8 subnet randomly in Python 3:

  >>> import ipaddress
  >>> import random
  >>> ipaddress.IPv4Address('127.0.0.1') + random.randrange(2**24 - 2)
  IPv4Address('127.23.181.175')
[ Parent | on HN ]
Re:How to steal a developer's local database by wcarron27 on Wednesday September 14, 2016 @02:55PM (#12500133)
Hey, I know I'm a bit late to the party. But I'm looking to protect my company's redis instance from these attacks and your approach looks very promising. Things is, I don't know what to do now that I've written a similar script. Where should I use this code? In the redis.conf file?

Bear in mind, I'm a front end developer, so this is absolutely not my forte. Thanks for the help.

[ Parent | on HN ]
Re:How to steal a developer's local database by _RPM on Thursday September 01, 2016 @05:30PM (#12409053)
Nice use of __add__ operator over loading here
[ Parent | on HN ]
Re:How to steal a developer's local database by fizzbatter on Thursday September 01, 2016 @05:05PM (#12408872)
I really appreciate this code example. I've been using 127.0.0.1 for all my local dev stuff, relying on ports. This is pretty awesome!
[ Parent | on HN ]