4 ms·
And when China hacks your server, takes a little bit longer, and inserts a rule that only serves the malware JS to Chinese-allocated IPs, will your monitor syst
by adgar 15y ago
And when China hacks your server, takes a little bit longer, and inserts a rule that only serves the malware JS to Chinese-allocated IPs, will your monitor systems be checking from mainland China, too?
Maybe they don't modify your app's code, but insert an iptables rule that achieves the same effect.
When a scheme relies on perfect intrusion detection you are not discussing security, you're discussing damage control.
- donpark 15y agoThere are safety measures one has take to deploy stuff I describe to protect against subset attacks like you mentioned as well as hackers using sleepers or logs to identify monitors, etc. It's not easy stuff and definitely not something startups should take on w/o getting side-tracked. This is why I wrote "when applied appropriately" in my original comment.