I recently listened to a Darknet Diaries episode about the LinkedIn hack.
A russian hacker exploited a vulnerability in a public webserver for a personal website that a LinkedIn engineer self-hosted from his home. From there, the hacker was able to hop from the server, through his local network, to his work laptop. From the work laptop, he used the engineer's VPN credentials to get inside LinkedIn's internal systems and dump the databases.
That scared be into moving all my public webservers I self-host at home to a VPS.
I'm in the migration process right now, that's why my NIP-05 and lnurl are not working at the moment.
sommerfeld
npub16r…kz5pl
2023-04-20 18:27:08
Author Public Key
npub16r0tl8a39hhcrapa03559xahsjqj4s0y6t2n5gpdk64v06jtgekqdkz5plPublished at
2023-04-20 18:27:08Event JSON
{
"id": "c883464277dd796054a9a43474b8d544dccaa50a83ed99176135c0d27ca426eb",
"pubkey": "d0debf9fb12def81f43d7c69429bb784812ac1e4d2d53a202db6aac7ea4b466c",
"created_at": 1682015228,
"kind": 1,
"tags": [],
"content": "I recently listened to a Darknet Diaries episode about the LinkedIn hack.\nA russian hacker exploited a vulnerability in a public webserver for a personal website that a LinkedIn engineer self-hosted from his home. From there, the hacker was able to hop from the server, through his local network, to his work laptop. From the work laptop, he used the engineer's VPN credentials to get inside LinkedIn's internal systems and dump the databases.\n\nThat scared be into moving all my public webservers I self-host at home to a VPS.\n\nI'm in the migration process right now, that's why my NIP-05 and lnurl are not working at the moment.",
"sig": "b5ba8deb76bf5c202d19476684f55dee5021b35534056b1a8c65f18e95ff72ec1abd124f03f7178b038d60894445a61e80e5dcf1cb1e6fd37b37657053e22d8d"
}