3 ms·
I know Germany provides the same service as well, but I don't know how fleshed out it is really. So far all the mails they sent me have been not very helpful.
by chmod775 4y ago
I know Germany provides the same service as well, but I don't know how fleshed out it is really. So far all the mails they sent me have been not very helpful.
- danudey 4y agoCanada does the same thing, they actually found a memcached instance of ours on a dev VM that was accidentally exposed to the internet.
- BonoboIO 4y agoSame. I run a plex server and they send me the same unhelpful and wrong email every few days. I created a gmail rule to delete it immediately.
- lutoma 4y agoMore details on the German one: https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Cyber-Sicherheitslage/Reaktion/CERT-Bund/CERT-Bund-Reports/cert-bund-reports_node.html https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisati... The intention is good, but in practice I think it's mostly useless because: * The reports go to the AS operator, who in most cases are not the actual admins of the vulnerable software. Some hosting providers such as Hetzner and Manitu have scripts in place to forward reports to the respective customers, but most don't since it involves a lot of parsing of the email (which is not in an easily machine readable format). * The emails often warn about security issues that may not actually be problematic (i.e. merely warning about some open port that may be intentionally open, and especially if you operate, say, a honeypot), with no way to opt out for specific hosts/ports. So you can only really filter them entirely in your mail client which I think most people do.