Gitlab servers are being exploited in DDoS attacks

Re:Gitlab servers are being exploited in DDoS attacks by lemoncucumber on Friday November 05, 2021 @03:37AM (#29116370)

Yes, I was simplifying — the important part is keeping the untrusted code off of a trusted network. If you want to do the legwork of carefully segregating things then of course network access can work.

I didn’t mention containers since they don’t provide strong isolation and some people misuse them as though they do. There’s no harm in using them as another layer of defense, but hardware virtualization provides much better security.

[ Parent | on HN ]

Re:Gitlab servers are being exploited in DDoS attacks by PLG88 on Friday November 05, 2021 @07:05AM (#29117628)

Why not just not trust the network or host at all. Put private connectivity inside trusted code using an SDK. Then the trusted apps can only communicate to devices/apps defined and nothing else. Untrusted code cannot access the trusted network as the network is acutally inside the apps/system.

[ Parent | on HN ]