‹ BackHN Continuity

Thread

GitLab Outage

70 points · 36 comments · kunley

  1. davb · · focus · HN ↗
    Coincidentally (?) we’ve seen a huge uptick in failed login attempts to our MFA-protected admin accounts on our self-hosted Gitlab CE instance today. They’re coming from thousands of IPs across hundreds of networks (VPS providers and, apparently, residential proxies).
    1. TZubiri · · focus · HN ↗
      It's probably related to the issue published by aikidolabs where leaked per-user gitlab issued emails were being used as a sort of credential.

      <a href="https:&#x2F;&#x2F;www.aikido.dev&#x2F;blog&#x2F;gitlab-email-push-to-main" rel="nofollow">https:&#x2F;&#x2F;www.aikido.dev&#x2F;blog&#x2F;gitlab-email-push-to-main

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.