News for hackers. Stuff that matters.

A comment on Capital One Says Breach Hit 100M Individuals in U.S. Parent comment

Re:Capital One Says Breach Hit 100M Individuals in U.S by ivyivy on Monday July 29, 2019 @09:01PM (#20561140)
Do you mean ingress? You probably wouldn’t want to allow ingress or egress, but the statement says connecting from a TOR exit node to CapitalOne, not the other way around.
[ Parent | on HN ]
Re:Capital One Says Breach Hit 100M Individuals in U.S by Scoundreller on Monday July 29, 2019 @09:56PM (#20561421)
Sometimes the best way to handle "bad" traffic is not to reject/block it, but to respond to it incredibly slowly, or divert to an uninteresting flaky phantom server, or reject every login attempt (even with correct credentials) to divert attacker's attention.

The ingress was okay, but the egress flow was very very bad!

[ Parent | on HN ]
Re:Capital One Says Breach Hit 100M Individuals in U.S by ryanlol on Tuesday July 30, 2019 @09:27AM (#20564603)
That seems like a great way to waste your own time accomplishing nothing.
[ Parent | on HN ]
Re:Capital One Says Breach Hit 100M Individuals in U.S by Scoundreller on Tuesday July 30, 2019 @10:30AM (#20565121)
I think it was a part of mailinator’s approach to running a disposable email server.

The operator’s approach to bad actors was to respond as slowly as possible instead of quickly rejecting.

[ Parent | on HN ]