@frederic Motzen schreibt man mit t!

@frederic lieber 'ne Feier-Faxe 🍺

@frederic

LOL, 😄

@frederic Auf deren Startseite: "apt install crowdsec-firewall-bouncer-iptables"

Sorry aber ich kann ne Pseudo-Sec-Bude, die immer noch iptables legacy shit macht nicht ernst nehmen. Selbst Debian macht mittlerweile nftables.

@frederic@chaos.social
1) works slightly better, especially if you don't know a good heuristic to catch bots early on (say, checking wordpress pages or xmlrpc endpoints that don't exist, but sometimes they do exist)
2) consumes much more resources compared to fail2ban, kinda noticable on low-end VPSes
3) is more complex and can be trickier to configure for nonstandard scenarios

so, as usual, a tradeoff.

Okay, just to clarify:
- No, I'm not really a LastPass user.
- #HugOps to the #LastPass team.
- Were there security related design decisions that should have been handled differently? Of course.
- It's easy to get snarky on the Internet, but don't be an asshole.