5 ms·

I think blocking network access is the simplest fix. Just make the payor specify a whitelist. Email them the blocked attempts. You can run the white list checke

I think blocking network access is the simplest fix. Just make the payor specify a whitelist. Email them the blocked attempts. You can run the white list checker on a c3a.large for a pretty big CI.

rurban 6y ago
whitelist? A bit drastic for that minor nuisance. Block outbound to the crypto-miner servers is enough.
- lanstin 6y ago
  I am of the school of know and manage your dependencies. And it is really hard to block stuff with a black list. Especially when the opponent has money.