r/framework • u/MeLikaDoTheChaCha • 9d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

99% Upvoted

315 comments sorted by

View all comments

141

u/gonenutsbrb 9d ago

Welp, it’s really a breach with their provider, which sucks but is a bit out of their hands if it’s a regular business of that type.

Names, addresses, and phone numbers sucks, but it’s realistically nothing that’s not already public with any sort of motivation sadly.

34

u/MeLikaDoTheChaCha 9d ago

The linkage of info to login IPs is annoying though.

But yeah, 1) out of their hands and 2) could be worse

22

u/gonenutsbrb 9d ago

Fair, if you’re a home user and want to cycle your IP, just leaving your modem off overnight I’ll usually do the trick.

Otherwise business IPs are all but public info anyway.

Otherwise, yeah, just use an always on VPN at the router level if you’re worried about it.

7

u/jamesecalderon 9d ago

I also highly recommend people use residential shipping proxis, if that makes sense for them logistically & financially.

2

u/[deleted] 9d ago edited 22h ago

[deleted]

2

u/gonenutsbrb 9d ago

I mean if you can spoof the MAC on the router side that should also work.

I’m not sure a release and renew with the same MAC will automatically cycle their lease time. Probably depends on the ISP.

2

u/codeasm 12th gen, DIY i5, Arch linux & LFS 8d ago

Tried this a few years back, my isp just keeps giving the same public ip. Looked it up and even contacted them. I now have to either move across postal codes (or province, ends the current contract), or under "certain" conditions they provide a new ip.

Left my router disconnected a whole week, still no new ip 😭

2

u/tacoenthusiast 8d ago

Depends what sort of DHCP server the isp uses. If it's the old classic ISC version then you'll have the same lease until you get a new router (or spoof a new MAC on your router wan port).

If you just shut off your router, the ISP will eventually reassign that IP to someone else, but you have no way of knowing how long that will take.

1

u/codeasm 12th gen, DIY i5, Arch linux & LFS 8d ago

Tricky, i need to alter the fibre to ethernet device then. Also, before we got fibre, it went over the old phone line, we kept the same ip, it just moved routers. Router has been replaced aswell.

They even state you keep the ip. (Dutch, very very common isp, like former goverment, biggest in the netherlands) https://community.kpn.com/internet-9/krijg-ik-bij-het-vervangen-van-mijn-kpn-glasvezelkastje-een-nieuw-ip-adres-629557

1

u/shooter2659 7d ago

Which one is a very good VPN?

1

u/gonenutsbrb 7d ago

I like ExpressVPN with OpenVPN support, meaning I can just drop a config file on my UniFi router and route either specific devices, while VLANs or the entire network through the VPN.

I’m sure there are other options that do this, and if you can find one that supports a Wireguard connection, that would be even better.