PHP, TLS, etc… We appear to be facing a tsunami of vulnerabilities being discovered in record time. Further, the window to act on these vulnerabilities has basically closed to zero; hackers’ tools now automatically fold the very latest vulnerabilities into their botnets within minutes/hours of discovery. I have always been extremely reluctant to expose any of my services - even with the latest and greatest security tools. My choice to stay totally within the confines of tailscale seems vindicated given this week’s news. How are you all taking this?
I have no idea what you are on about. What do you want me to do? Turn the internet off? Lock my doors and not leave the house? Sit here crying and quivering because the world is gonna end? My head is deffo not in the sand, I’m looking out the window at the rain, enjoying my life, looking forward to tomorrow.
I’m not worried about my web server any more today then I was last year. It’s a web server, it’s not me or my life, yes it how important stuff, but if the world ends it’ll be the last thing I think of.
My web server is as safe as it needs to be. Thanks for your concern.
There’s a world of possibilities between “public facing server” and “turn the internet off”. Like using a VPN or mTLS. Or only connecting when you are at home.
However it sounds like you aren’t worried about the increased threat landscape, or at least aren’t willing to compromise on your current level of convenience. That is a fair answer to OP’s question.
To me there is no increased threat landscape. The world is a scary place, full of baddies trying to get you. Since the dawn of the internet there has been vulnerabilities being found and used maliciously. Just because the big tech sota models are shouting about how great they are by finding them, giving them some nice free marketing, doesn’t mean that much has changed.
Ok, ai has increased the frequency and amount being found, but that is equally increased both for malicious and cybersec, so it essentially cancels out.
My server is public facing and secure, so that both myself, family and friends can use it, especially for the less tech savvy.
This is not what experts are saying.
https://therecord.media/ai-set-to-help-attackers-more-than-defenders
https://www.sophos.com/en-us/blog/why-incident-response-demand-will-grow-faster-than-expected
https://matthew-rosenquist.medium.com/why-cyber-attackers-benefit-more-from-ai-technology-than-defenders-98efd14ac664
You’re determined that I worry about my public server aren’t you? Your initial question wasn’t actually a question, but just a trap for you to lure me into to be converted to your way of thinking?!?! rumbled! 😂 There are always experts to quote for any argument. Personally, I don’t feel any more vulnerable than before ai decimated the security landscape.