logoalt Hacker News

cyberpunk • yesterday at 7:59 PM • 1 reply • view on HN

    1. Good engineers should have had a firewall/waf/nat/thingy infront of their linux systems, and alerting at least on those directly exposed to reduce/eliminate blast radius
    2. Good engineers don't enable MTCP (which as far as I can tell is largely a desktop feature) on firewalls
    3. ???
    4. Profit!

Replies

solyin • today at 5:53 AM

Is step 3 reading the CVE for long enough to understand that disabling mptcp is an incomplete mitigation? What happens if someone discovers a bug in the particular firewall software you're running?

➕ show 1 reply