Web Scrapers Claim to Sell Personal Data on Facebook Users on a Hacker Forum

Re:Web Scrapers Claim to Sell Personal Data on Facebook User... by toast0 on Monday October 04, 2021 @02:01PM (#28750186)

I worked at WhatsApp until 2019; I don't remember any disaster plans where taking everything down was an option (although I'm sure they exist), but dropping BGP sessions is probably not the best way to do it, because it's hard to reverse and hard to inspect the system without BGP.

Over in WA land, we'd probably just kill all the frontend servers if needed. For all of FB infrastructure, killing all the loadbalancers would probably work, and also the outgoing proxy hosts, as appropriate. No need to mess with DNS or BGP.

[ Parent | on HN ]

Re:Web Scrapers Claim to Sell Personal Data on Facebook User... by y4mi on Monday October 04, 2021 @04:46PM (#28751868)

I agree that it's highly unlikely to be a deliberate action, but your listed mitigations would only help against security issues that impact the web services.

It could be the only way to go in the highly unlikely scenario that attackers are able to compromise the management APIs of various infrastructure devices like routers, baremetal servers etc.

These APIs are usually on airgapped networks though, which makes this extremely unlikely

[ Parent | on HN ]