Private IP Access Surprise
One of our interesting findings was the iptables rules, since when you enable Private IP access (Which cannot be disabled afterwards), access to the MySQL port is not only added for the IP addresses of the specified VPC network, but in- stead added for the full 10.0.0.0/8 IP range, which includes other Cloud SQL instances.
A screenshot shows a technical finding about Google Cloud SQL: enabling Private IP access creates iptables rules that expose the MySQL port across the entire 10.0.0.0/8 private IP range, including other Cloud SQL instances. The joke is the alarming security misconfiguration and the fact that the setting cannot be disabled afterward, making it suitable as a reaction to unexpected or dangerously broad access.
text screenshot / скриншот текстаtechnical documentation / техническая документацияiptables rules / правила iptablesMySQL port / порт MySQLIP address / IP-адресVPC network / сеть VPCCloud SQL instance / экземпляр Cloud SQLprivate IP access / доступ по частному IP10.0.0.0/8 IP range / диапазон IP 10.0.0.0/8paragraph / абзац
#cloud security#облачная безопасность#cybersecurity#кибербезопасность#google cloud#cloud sql#mysql#iptables#private ip#частный ip#vpc#network exposure#сетевая экспозиция#misconfiguration#неправильная настройка#access control#контроль доступа#infosec#инфобез#tech meme#технический мем#screenshot#скриншот#security fail#провал безопасности
- @infosecmemes / 383 2020-08-20
- Type
- image
- Size
- 750×414 · 41.3 KiB
- Mood
- alarming, sarcastic
- Language
- en
- Added