News for hackers. Stuff that matters.

A comment on Two malicious Python libraries caught stealing SSH and GPG keys. Parent comment

Re:Two malicious Python libraries caught stealing SSH and GP... by objectified on Wednesday December 04, 2019 @09:20AM (#21702330)
I'm not sure I understand your question correctly, but I'm talking specifically about outbound network traffic. Your API's application servers (where such evil libraries could be deployed) should not be able to have any network connectivity towards the internet. So on that server, you should not be able to do even `curl www.google.com` for example.
[ Parent | on HN ]
Re:Two malicious Python libraries caught stealing SSH and GP... by wil421 on Wednesday December 04, 2019 @10:01AM (#21702699)
GP was asking how you would allow APIs to respond to requests if you are blocking outbound traffic.

I’m assuming if you open a connection for a sync request you’d be fine. What about an async request? I’d imagine a scenario where your API needs to do some processing first, connect to another internal system, and then respond async to the outside system.

[ Parent | on HN ]