Skip to content
Snippets Groups Projects
  1. Feb 07, 2024
  2. Feb 05, 2024
  3. Feb 04, 2024
  4. Jan 30, 2024
  5. Jan 24, 2024
  6. Jan 17, 2024
  7. Jan 15, 2024
  8. Jan 12, 2024
  9. Jan 11, 2024
  10. Jan 07, 2024
  11. Dec 31, 2023
  12. Dec 20, 2023
  13. Dec 16, 2023
  14. Dec 13, 2023
  15. Oct 31, 2023
  16. Oct 30, 2023
  17. Oct 22, 2023
  18. Oct 21, 2023
  19. Oct 13, 2023
  20. Sep 29, 2023
    • Sheogorath's avatar
      removal(crowdsec): Dropping crowdsec · cf0bef90
      Sheogorath authored
      After some testing and fiddling around, I don't think it's worth the
      hassle. Not only was ingress-nginx much less stable since integrating
      the crowdsec bouncer plugin, but also just providing some questionable
      log parsers etc, mainly focusing on bruteforce attacks for passwords,
      which is useless when everything goes to SSO anyway.
      
      Finally there were some other technical faux pas, like hardcoded
      passwords on the integrated dashboard (which is also mostly useless),
      expired GPG keys on the Fedora repository and finally a lack of bouncer
      modules on current Fedora releases, depsite the docs claiming otherwise.
      And given the issues date back to march, it doesn't seem to be a
      something that will be resolved any time soon.
      
      I guess my biggest critique is that the whole "fail2ban of the modern
      area" limits itself to IP addresses only. No additional metadata to
      block or mitigate attacks or identify attackers. Relying on IP addresses
      only in 2023 is not on time. The whole being distributed with the lapi
      server, is nice, but not enough to make this acceptable.
      cf0bef90
  21. Sep 28, 2023
  22. Sep 27, 2023
  23. Sep 26, 2023
Loading