‹ BackHN Continuity

Thread

CrowdSec Source Code Leak

160 points · 57 comments · eccgecko

  1. Sorrel47 · · focus · HN ↗
    Time to scrutinize those CrowdSec deployments even closer. Hopefully, it's nothing critical that gets exploited.
    1. miffy900 · · focus · HN ↗
      > CrowdSec source code consists of two parts: a private one and another that hosts our Free Open Source Software (i.e., the Security Engine), which is public by design and therefore out of scope. The private part, though, contains the source code for our SaaS console, some AWS Cloud routines, some connectors, and automations.

      This leak seems incredibly mundane. customers would have the security engine installed, but not the console.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.