throwaway0727

4 ms·

1. 1.▲
   by throwaway0727 10y ago

   Thanks, will have that in mind, as its' not up to me to allocate funds for consulting, etc. Any idea how much can such a service cost, assuming web application with a very common stack (such as Ruby on Rails + PostgreSQL)? Is it someth
2. 2.▲
   by throwaway0727 10y ago

   Unfortunately, it's the later - no details of exploit, just a proof. If this comes to ransom, rather than unethical/unexperienced gray hat thing, are there any good steps to take? Or hiring an expert consultancy is probably the on
3. 3.▲
   by throwaway0727 10y ago

   OP here. Thanks for all the responses. I took action and updated firewall settings (which were too loose), ensured that offsite backups are in place if worse comes to worst, rotated all api keys etc, meanwhile trying to contact the anonymou
4. 4.▲
   Ask HN: Anonymous person sent proof of SSH access to our production server

   450 points by throwaway0727 10y ago|231 comments