The fail2ban suite is a very useful tool in the battle against brute force login attempts. Where it’s capabilities broke down for me, however, was in addressing repeat offenders. This post includes a configuration to permanently block repeat offenders using the iptables firewall.
Tag: security
Comcast Sets Customers Up as Phishing Targets
Today I received an e-mail message from Comcast extolling the value of a (new?) service that will PROTECT ME™ from the INTERNET® and all its evil. I’ve included this little gem of a PR masterpiece below. Now don’t get me wrong, the threats presented by malware in general – botnets, phishing, scareware, credential thieves, etc,… Continue reading Comcast Sets Customers Up as Phishing Targets
How Not To Capitalize On A Security Compromise
OK, Gawker got owned. We get it. A family of major media sites suffered the data theft of an estimated 1.5 million user records (usernames and poorly-protected passwords), with unknown impacts beyond that. They didn’t notify users in a very timely fashion, and there is an air of “too little, too late” around their response… Continue reading How Not To Capitalize On A Security Compromise