Crowdsec: A Fail2Ban alternative written in Go

Re:Crowdsec: A Fail2Ban alternative written in Go by dgrin91 on Monday October 19, 2020 @01:36PM (#24828709)

How is reversing the hash of an IP easy? Are you saying because there are only 4billion ipv4s? Hash should be fine for ipv6 still, right?

[ Parent | on HN ]

Re:Crowdsec: A Fail2Ban alternative written in Go by Philippe_H on Monday October 19, 2020 @02:32PM (#24829369)

Well hashing is (usually) a symmetric function and we are open source... Meaning you could recover the key in the code (or intercept it during transfer). I think Private/Public key is a simpler approach, reusable elsewhere in the code and it's known to be safe. But I'm not the CTO either, I could be mistaken.

[ Parent | on HN ]

Re:Crowdsec: A Fail2Ban alternative written in Go by floren on Monday October 19, 2020 @04:45PM (#24830812)

Hashes aren't symmetric and don't use a key.

[ Parent | on HN ]

Re:Crowdsec: A Fail2Ban alternative written in Go by genuinebyte on Monday October 19, 2020 @05:17PM (#24831132)

Here, I found this really useful to understand hashes: https://crackstation.net/hashing-security.htm

[ Parent | on HN ]

Re:Crowdsec: A Fail2Ban alternative written in Go by Philippe_H on Monday October 19, 2020 @02:33PM (#24829377)

(but I think they already send it through HTTPS)

[ Parent | on HN ]

Re:Crowdsec: A Fail2Ban alternative written in Go by dx034 on Tuesday October 20, 2020 @02:58AM (#24834578)

But would you want to only block single IPv6 addresses? Usually whole blocks are assigned as far as I know? So just hashing a single ipv6 would probably not work very well.

[ Parent | on HN ]