July 29th 19, 02:47 PM
posted to alt.privacy.anon-server,comp.os.linux.misc,comp.os.linux.advocacy,alt.windows7.general,alt.comp.os.windows-10
|
|
|
Florida city reportedly fires IT director after being forced topay $460G in ransomware attack
On 29/07/2019 14.21, Mayayana wrote:
"J. P. Gilliver (John)" wrote
| Now that's a closer answer. I see https://lite.ip2location.com/ has
| (bottom right of page) a list of countries, though I didn't investigate
| it.
|
I use the MaxMind free database when processing my server
logs, though it's got some limitations, it's work intensive, and
addresses constantly change. I'm only using it after the fact,
out of curiosity. I've also seen people sharing numeric lists online,
especially to block China.
But at some point this becomes unrealistic. Your front door
now opens to the world. The way to make it secure is not to
have logins, SQL backends, shopping carts components, etc,
on a website directly connected to data. That's nothing new.
But no one wants to accept that you can't have an internet
connected network and still have security, in spite of the fact
that it's been proved over and over again. So people wiseacre
about best security practices.
People talk about blocking China, Russia, Eastern Europe,
Africa, yuppies, commies, rednecks.... What's left? White,
1st-world moms shopping for jumpers? Is there some reason
to trust Brazil and New Zealand?
Many of the attack probes on my site are coming from Amazon
web services, which I am tempted to block, if only to block the
world-wide infection of the decency-eating bacteria known as
Bezos. But all of those filters hurt innocent people. Small
businesses are on Amazon web services. Shouild I block them
because they don't know how to manage security? Should I
block the millions of Chinese and Russians who need software
and can't afford to buy it, just to block the hundreds with
criminal motives? Someone suggested, "Who cares about them?
They don't buy product." But that's a petty, primitive, racist
approach. More to the point, you can't block them all. The
Internet doesn't fit into the "move-to-the-suburbs" approach
to crime prevention.
Indeed...
--
Cheers, Carlos.
|