Re:New ‘Meow’ attack has deleted almost 4k unsecured databases
by rewq4321 on Monday July 27, 2020 @09:00AM
(#23964638)
> don't expose services that are not meant to face the Inet directly
I did not (in the slightest) suggest that people should do this. I was commenting on the "free-ness" of the lesson (read the comment I was replying to). It could have been more "free" with a little more effort. Straight-up deletion wasn't the only option.
Re:New ‘Meow’ attack has deleted almost 4k unsecured databases
by nix23 on Monday July 27, 2020 @10:11AM
(#23965245)
>Straight-up deletion wasn't the only option.
No but a good one.
>It could have been more "free" with a little more effort.
Even White-Hats work not for free (for companys). Don't build Cars if you don't know how a break work, don't build IT-Services if you have no the slightest idea how to secure them.
No just my Webserver/HAProxy. The difference is, don't expose services that are not meant to face the Inet directly.
Production-Type Webservers are, SSH, VPN, HAProxy etc are.
Databases, devel-webservers, NFS, Samba are not!
Sure even the best hardened Service can have vulnerabilities, but that's how life is, better have a door with a key than one without, even when someone is capable to open your door with a Lock-pick.