- cross-posted to:
- linux@lemmy.ml
- cross-posted to:
- linux@lemmy.ml
I wrote a dead simple file canary tool that will install an eBPF program that drops all outgoing packets if a canary is touched. I wrote this in response to the current trend of supply chain attacks that try to harvest credentials
Right it’s just for things you don’t use but a credential harvester would find interesting.
I’ve been working a lot on containing the blast radius with some careful LXC usage, but this was a quick way to get some real value without a ton of thought.