News for hackers. Stuff that matters.

A comment on Security through obscurity is underrated. Parent comment

Re:Security through obscurity is underrated by jeroenhd on Monday October 24, 2022 @09:30AM (#33316356)
Putting random login pages at /wp-admin/ is great for farming IP ranges to block. They don't even need to go anywhere, all you need is a form with a login button and bots will try to log in.
[ Parent | on HN ]
Re:Security through obscurity is underrated by netsectoday on Monday October 24, 2022 @09:50AM (#33316582)
You should drop down a few layers on the OSI model and catch this at your reverse proxy instead of publishing login pages to catch every permutation of 'wp' in urls.
[ Parent | on HN ]