Episode 294

Crowd Sourced Security with Philippe Humeau


July 12th, 2022

53 mins 52 secs

Your Hosts
Special Guest

About this Episode

Philippe Humeau joins us this hour to talk about CrowdSec - an IDS/IPS that uses crowd sourced information to evaluate threats on your network!

-- During The Show --

01:00 New Red Hat CEO

03:44 Remove all traces of a user on logout? - Wayne

  • TailsOS
  • Noah's hackish solution
  • TempFS? RamDisk? SquashFS?
  • 'Delete' isn't a thing (Inodes)
  • PhotoRec

09:30 Recommendations for hosting provider - Gary

  • Gary's Site
  • Host Gator
  • Self Host with Hugo
  • Tied to Hosting provider

14:00 Listener responds about CAD on Linux - Heath

15:30 More Info about Steve's Solar? - Ian

18:30 News Wire

CrowdSec Interview

  • Philippe Ew-Mow from CrowdSec
  • What is CrowdSec
  • How CrowdSec works
  • Domains and Hashes vs IP Address and Behavior
  • How IPs are cleaned
  • Reporting based on "identity" not IP Address
  • IDS and IPS
  • CrowdSec Agent and CrowdSec Console
  • Open Source
  • Cyber Threat Intelligence (CTI)
  • CrowdSec API
  • How does CrowdSec resolve IDS and IPS problems?
  • Blocking Unique Attacks
  • The 3 Tiers of Crowdsec
  • CrowdSec and GDPR
  • Using Crowdsec Bouncers (IPS)
  • CrowdSec Best Practices
  • Replay Mode
  • Integration into Firewalls
  • CrowdSec on OPNSense
  • Best place to get started/learn [CrowdSec Docs](doc.crowdsec.net)

49:00 Thoughts on CrowdSec

  • Noah has been playing with CrowdSec
  • Can also identify and block malicious out going traffic

51:00 Interview with Matt Hicks

-- The Extra Credit Section --

For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!

This Episode's Podcast Dashboard

Phone Systems for Ask Noah provided by Voxtelesys

Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix

-- Stay In Touch --

Find all the resources for this show on the Ask Noah Dashboard

Ask Noah Dashboard

Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!

Altispeed Technologies

Contact Noah

live [at] asknoahshow.com

-- Twitter --

Support Ask Noah Show