News for hackers. Stuff that matters.

A comment on LuLu: An open-source macOS firewall that blocks unknown outgoing connections. Parent comment

Re:LuLu: An open-source macOS firewall that blocks unknown o... by 2dvisio on Friday January 19, 2018 @08:34PM (#16191510)
When I tried pi-hole I was amazed by it. Until the day I discovered someone in China hacked it :-///
[ Parent | on HN ]
Re:LuLu: An open-source macOS firewall that blocks unknown o... by DavideNL on Saturday January 20, 2018 @02:33AM (#16192501)
...and how did you come to the conclusion they hacked the pi-hole?
[ Parent | on HN ]
Re:LuLu: An open-source macOS firewall that blocks unknown o... by chewyland on Saturday January 20, 2018 @12:54AM (#16192284)
Sounds like a poor or reused password.
[ Parent | on HN ]
Re:LuLu: An open-source macOS firewall that blocks unknown o... by edgartaor on Saturday January 20, 2018 @10:57AM (#16193762)
I got tons of shh login attempts from Russia and China. I just install fail2ban.
[ Parent | on HN ]
Re:LuLu: An open-source macOS firewall that blocks unknown o... by hendersoon on Saturday January 20, 2018 @01:42PM (#16194688)
Why is your pi-hole exposed to the internet? That's not a great idea. You could have other people using your DNS service also.

It's true it's security through obscurity and won't slow down a spear fisher, but I always change the SSH port to something like 22022 when I have to expose it to the internet and find this eliminates almost all of the portscanning/doorknob rattling. Same thing with wordpress, changing the /wp-admin directory is immensely helpful.

[ Parent | on HN ]
Re:LuLu: An open-source macOS firewall that blocks unknown o... by dfee on Friday January 19, 2018 @09:45PM (#16191761)
That’s terrible. Did you move on to something else?
[ Parent | on HN ]
Re:LuLu: An open-source macOS firewall that blocks unknown o... by AckSyn on Friday January 19, 2018 @09:16PM (#16191658)
Could have been a number of things - most likely culprit I've seen is that it was left exposed to the internet, ssh most likely, and the default password wasn't changed.
[ Parent | on HN ]