‹ BackHN Continuity

Thread

CrowdSec Source Code Leak

160 points · 57 comments · eccgecko

  1. sandeepkd · · focus · HN ↗
    On the funny side, reading the website tagline, apparently they claim to know who is attacking you, they just happen to miss out on who attacked them.

    Turns out they are not really a security company, just an aggregator of bad IPs. Ideally this kind of aggregator problem is best suited for a trusted not-for-profit company where providing the data needs some level of credibility and querying the data costs you nominal fee to keep the setup floating.

    1. Meneth · · focus · HN ↗
      I suppose CrowdSec isn't used to analyze GitHub's traffic, so they wouldn't have much info to go on.

      If they had self-hosted their own repos, they might have had more luck.

      1. nicce · · focus · HN ↗
        GitHub Enterprise has at least some level audit log
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.