2 ms·
Remember when fail2ban had an RCE to execute things on a server via root user and it was as simple as parsing an email string because it was executing the mail
by cookiengineer 4y ago
Remember when fail2ban had an RCE to execute things on a server via root user and it was as simple as parsing an email string because it was executing the mail binary on the other end? [1]
That's pretty much the reason why I started to write my own guard tools.
I don't need people from China or Russia logging in to my server. I don't understand why tools like this are never built in an ASN aware manner, blocking mechanisms would be so much easier.
[1] https://research.securitum.com/fail2ban-remote-code-execution/ https://research.securitum.com/fail2ban-remote-code-executio...
- intelVISA 4y ago> write my own guard tools. if (notMe) panic(); Though I agree, security is a mindset not a tool you can simply download or run.