Loz

DevRel. Tweets are my own. @[email protected]

[Loz @iiAmLoz]

Following my post earlier this week I made a small write-up, How @Crowd_Security mitigated attacks following issuing certificates from @letsencrypt and how it all unfolded. #CyberSecurity #IDS #IPS

https://t.co/SKzTmIqGmC

[CrowdSec @Crowd_Security]

Missed our session at @DrupalConEur ? Or maybe you’d like a quick refresher? 🎥

You can now watch the full replay right here 👇

Discover how the Drupal Association and CrowdSec have joined forces to deliver community-powered protection directly at the CMS layer.

Hosted by our Head of Professional Services, @iiAmLoz , this talk dives into how open-source collaboration enables site maintainers, developers, and security enthusiasts to strengthen the open web, together.

👉 Watch now: https://t.co/Pw9id9hN01

[Loz @iiAmLoz]

Great! now we set a base configuration to always deny all dotfile access so even if a developer accidentally places a file then this will reject any connection.

Use this in combination with CrowdSec to automatically ban IP addresses that violate this access control.

[Loz @iiAmLoz]

So I see the comments like:

"Get them to download a 10gb file"
"Let the connection hang so they waste their time"

This is all good if you don't pay for egress or compute time on your web application.

However, lets take a practical approach to hardening your web server 🧵

[Low Level @LowLevelTweets]

guys how dumb do you think I am? come on. nice IP addresses btw.

[Loz @iiAmLoz]

To use this security.conf you should import the config within your TLS level vhost, as typically your standard http should be a redirect to the TLS level.

[CrowdSec @Crowd_Security]

CrowdSec Bl🚫ck Friday is here!

Secure your systems with our limited-time deals:

🔐 60% off Console Premium (1 month)
Use code BLOCKFRIDAY25 at checkout: https://t.co/l1oy2seHxt
Stop botnets, get real-time & custom blocklists, instant “Am I Under Attack?” alerts, and API access.

🛡️ 30% off the Blocklist Bundle
Block threats earlier, cut alert fatigue, and benefit from daily IP rotation.
👉 Fill out the form and choose Block Friday to claim your offer: https://t.co/Apd3t0LeMU

#BlockFriday #BlackFriday #cybersecurity

[Loz @iiAmLoz]

If you might send mail later (e.g., via a newsletter service), remove/adjust these before sending.

You don’t need an MX at all, but the Null MX makes the “no mail here” intent explicit for receivers that honor it.

[Loz @iiAmLoz]

I read through comments and if true then it because the domain did not explicitly inform that its not used for mail delivery.

it is important even if you know you don't send emails to add a explicit DNS records for it 🧵

[Theo - t3.gg @theo]

T3 Chat is currently banned in multiple countries because some malicious hater spam-reported our domain to various threat data providers.

I understand that people are upset with me right now, but going after my business and team is unacceptable.

[Loz @iiAmLoz]

Null MX

Host: @

Type: MX

Value: 0 .

[CrowdSec @Crowd_Security]

We’re so excited for our lunch session today at @DrupalConEur !

Join @iiAmLoz today at 12h45 in the Session Room (Hall G1) for a discussion on how to protect the open web with community-driven security.

👉Get all the details here: https://t.co/DNHo3ZbQlm

We can’t wait to see you! 👋

@drupalassoc #drupalconeu2025 #opensource #community #cybersecurity

[DrupalCon Rotterdam 2026 @DrupalConEur]

🎉 Good morning, Vienna — Day 2 of #DrupalConVienna is here! 🇦🇹

🕣 8:45 – Keynote: Neurodiversity (Vera Herzmann)
🕛 12:25 – Women in Drupal Networking (JAKALA)
🕧 12:45 – Lunch Symposium (CrowdSec)
🕜 13:30 – The Web in 2035: Keynote Panel

[DrupalCon Rotterdam 2026 @DrupalConEur]

🍽️ Join the Lunch Symposium at #DrupalConVienna 2025!
🎙️ Hosted by CrowdSec

Don’t miss this opportunity to explore practical ways to secure your site and be part of building a safer, more resilient web. 💪

👉 https://t.co/RQvIImaFY1
@Crowd_Security

[Loz @iiAmLoz]

@biwills @vercel @Railway I also made https://t.co/cJjMXVuEcP as a traefik plugin.

[Loz @iiAmLoz]

@Cloudflare Yes it's most likely a backdoored website

[Loz @iiAmLoz]

Phishing site for @Cloudflare protected by @Cloudflare nice!

URLScan: https://t.co/excuRUkF7F

#Cybersecurity #phishing

[Loz @iiAmLoz]

Some government representatives are now floating the idea of banning VPNs.

This raises serious concerns—not just about technical understanding, but about how far they’re willing to go to enforce content restrictions.

but I guess think of the children?

[Loz @iiAmLoz]

So the #OnlineSafetyAct is facing challenges. 🧵

It appears the technical implementation details—like geolocation restrictions—were underestimated, as these can be bypassed easily.

[Loz @iiAmLoz]

This could include grouping child devices into profiles with DNS filtering and safe search enabled.

Of course, once devices leave the home network, different challenges arise—but that’s where education and device-level controls can help.