About bot attacks

Mon, 01 Jan 0001 00:00:00 +0000

What attackers are trying to do

Most attacks we see on commerce sites are profit-driven, not purely destructive.

Broadly, attackers want to:

Test stolen payment cards to see which ones are still valid (carding).
Abuse business logic such as coupons, loyalty points, or free-trial flows.
Harvest data from product catalogs or customer accounts.

The goal is nearly always to turn someone else’s infrastructure and payment flows into cheap testing infrastructure for stolen data.

Security Stance On Unbutu Package Versions

Mon, 01 Jan 0001 00:00:00 +0000

Introduction

At Webscale, we prioritize the long-term stability and security of our customer environments. A frequent question arises: “Why is Webscale using an older version of Nginx instead of the latest mainline release?” To understand our stance, one must understand the trade-off between feature velocity and proven stability, and how the Linux ecosystem manages security through a process called “Backporting.”

The “Latest” vs. “Secure” Myth

In the world of consumer software (like phone apps), a higher version number almost always means better security. In enterprise server infrastructure, this isn’t always the case.

Explanation on Webscale Product Documentation

About bot attacks

What attackers are trying to do

Security Stance On Unbutu Package Versions

Introduction

The “Latest” vs. “Secure” Myth