5 ms·
Yeah! We would say the same if someone propose us to use this :) 1. We share the source code of Wallarm Node (nginx-based filter instance) with the companies a
by hkr_mag 10y ago
Yeah! We would say the same if someone propose us to use this :)
1. We share the source code of Wallarm Node (nginx-based filter instance) with the companies after signing NDA.
2. Will run 3rd party audit of the code and share the report.
3. At some point, we'll open-source it.
Ivan (wlrm) will come up with the examples of attacks soon.
- elmigranto 10y agoWhat do you mean "come up"? You made a commercial product and don't have a single use case or user story to pitch?
- liquidise 10y agoWhy the negativity? I can think of a number of tech questions that no one but the deepest in the technical weeds on a team could provide actual answers to. Is deferring to someone else on a team to answer questions so bad?
- elmigranto 10y agoThere is quite a difference between technical questions and "what your product does, couple of examples where it's good at maybe?".
- hkr_mag 10y agoLot's of stories happening right away. Don't get the reason for the negativity. Though here is a recent story — critical XXE with remote file reading at LinkedIn (http://blog.wallarm.com/post/145883562288/critical-linkedin-vulnerability-proactively http://blog.wallarm.com/post/145883562288/critical-linkedin-...)
- deleted 10y ago[deleted]
- ryanlol 10y agoThis blog post has nothing to do with your product. Also, stopping a single request is very different from stopping an attack. A real attacker isn't going to stop the first time they get blocked, and if possible they'll probably end up evading your WAF.
- hkr_mag 10y agoIt absolutely has. The vulnerability was detected with a vulnerability scanner built in Wallarm. As for detection of attacks, in many cases, it's much easier to identify the attacker when he runs several requests than to stop only one request with a ready-to-use 0day exploit. And what's even more important, you need help to fix vulnerability unless attacker discovers it and find the way to evade WAF
- 0xmohit 10y ago> We share the source code of Wallarm Node (nginx-based filter instance) with the companies after signing NDA. Is that because of the licensing terms of a certain underlying component that you use which forces you to share it?
- hkr_mag 10y agoIt's because all the security guys (as we're) troll a lot and always skeptical (reasonably!) about blackboxes
- 0xmohit 10y ago> It's because all the security guys (as we're) troll a lot and always skeptical (reasonably!) about blackboxes Why not open-source it then? In that event tt wouldn't be termed a blackbox either.