Replying to Avatar sommerfeld

I recently listened to a Darknet Diaries episode about the LinkedIn hack.

A russian hacker exploited a vulnerability in a public webserver for a personal website that a LinkedIn engineer self-hosted from his home. From there, the hacker was able to hop from the server, through his local network, to his work laptop. From the work laptop, he used the engineer's VPN credentials to get inside LinkedIn's internal systems and dump the databases.

That scared be into moving all my public webservers I self-host at home to a VPS.

I'm in the migration process right now, that's why my NIP-05 and lnurl are not working at the moment.
Avatar
ContrarianAgrarian 2y ago

I’m not nearly as savvy with networking as I like so two questions:

1) Would a server (like Umbrel or Start9) that runs applications as tor hidden services solve this problem?

2) At what layer upstream is the threat mitigated? If I had two internet providers service my house that would create a gap, right? If so, is there anyway to do this via a technical mean rather than literally paying for two ISPs?

Reply to this note

Please Login to reply.

Discussion

No replies yet.