gabriel-samfia

3 ms·

1. 1.▲
   by gabriel-samfia 3y ago

   Ouch! This is why ephemeral runners should be used. Preferably virtual machines. On an infrastructure that can define security group rules to prevent lateral movement.
2. 2.▲
   by gabriel-samfia 14y ago

   We've seen the same kind of attack. We ended up limiting our DNS resolvers only to our own prefixes. It's a simple ACL in bind that allows recursion (domains your DNS server is not authoritative for), only to our subnets.
3. 3.▲
   by gabriel-samfia 14y ago

   There are many types of DDoS. Some max out your CPU, some your network. Given that a DDoS (Distributed Denial of Service) involves potentially thousands of willing or unwilling systems, it's relatively easy to make a server unresponsive. I