PHP, TLS, etc… We appear to be facing a tsunami of vulnerabilities being discovered in record time. Further, the window to act on these vulnerabilities has basically closed to zero; hackers’ tools now automatically fold the very latest vulnerabilities into their botnets within minutes/hours of discovery. I have always been extremely reluctant to expose any of my services - even with the latest and greatest security tools. My choice to stay totally within the confines of tailscale seems vindicated given this week’s news. How are you all taking this?

https://pwn.watch/

  • illusionist@lemmy.zip
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 hours ago

    I had a public facing jellyfin. I took it down because of that.

    Immich and nextcloud are still up.

    I’m not saying there is a rational reasoning behind it.