91
For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing? (lemmy.ml)
submitted 2 weeks ago by to c/selfhosted@lemmy.world
63 comments fedilink hide all child comments
 

PHP, TLS, etc.. We appear to be facing a tsunami of vulnerabilities being discovered in record time. Further, the window to act on these vulnerabilities has basically closed to zero; hackers' tools now automatically fold the very latest vulnerabilities into their botnets within minutes/hours of discovery. I have always been extremely reluctant to expose any of my services - even with the latest and greatest security tools. My choice to stay totally within the confines of tailscale seems vindicated given this week's news. How are you all taking this?

https://pwn.watch/

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 weeks ago (3 children)

There's a world of possibilities between "public facing server" and "turn the internet off". Like using a VPN or mTLS. Or only connecting when you are at home.

However it sounds like you aren't worried about the increased threat landscape, or at least aren't willing to compromise on your current level of convenience. That is a fair answer to OP's question.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 2 weeks ago (2 children)

    To me there is no increased threat landscape. The world is a scary place, full of baddies trying to get you. Since the dawn of the internet there has been vulnerabilities being found and used maliciously. Just because the big tech sota models are shouting about how great they are by finding them, giving them some nice free marketing, doesn't mean that much has changed.

    Ok, ai has increased the frequency and amount being found, but that is equally increased both for malicious and cybersec, so it essentially cancels out.

    My server is public facing and secure, so that both myself, family and friends can use it, especially for the less tech savvy.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 1 point 2 weeks ago (1 child)

    Ok, ai has increased the frequency and amount being found, but that is equally increased both for malicious and cybersec, so it essentially cancels out.

    This is not what experts are saying.

    https://therecord.media/ai-set-to-help-attackers-more-than-defenders

    https://www.sophos.com/en-us/blog/why-incident-response-demand-will-grow-faster-than-expected

    https://matthew-rosenquist.medium.com/why-cyber-attackers-benefit-more-from-ai-technology-than-defenders-98efd14ac664

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 2 weeks ago

    You're determined that I worry about my public server aren't you? Your initial question wasn't actually a question, but just a trap for you to lure me into to be converted to your way of thinking?!?! rumbled! 😂 There are always experts to quote for any argument. Personally, I don't feel any more vulnerable than before ai decimated the security landscape.

  • permalink
  • fedilink
  • source
  • parent