PHP, TLS, etc… We appear to be facing a tsunami of vulnerabilities being discovered in record time. Further, the window to act on these vulnerabilities has basically closed to zero; hackers’ tools now automatically fold the very latest vulnerabilities into their botnets within minutes/hours of discovery. I have always been extremely reluctant to expose any of my services - even with the latest and greatest security tools. My choice to stay totally within the confines of tailscale seems vindicated given this week’s news. How are you all taking this?
There’s a world of possibilities between “public facing server” and “turn the internet off”. Like using a VPN or mTLS. Or only connecting when you are at home.
However it sounds like you aren’t worried about the increased threat landscape, or at least aren’t willing to compromise on your current level of convenience. That is a fair answer to OP’s question.
To me there is no increased threat landscape. The world is a scary place, full of baddies trying to get you. Since the dawn of the internet there has been vulnerabilities being found and used maliciously. Just because the big tech sota models are shouting about how great they are by finding them, giving them some nice free marketing, doesn’t mean that much has changed.
Ok, ai has increased the frequency and amount being found, but that is equally increased both for malicious and cybersec, so it essentially cancels out.
My server is public facing and secure, so that both myself, family and friends can use it, especially for the less tech savvy.
This is not what experts are saying.
https://therecord.media/ai-set-to-help-attackers-more-than-defenders
https://www.sophos.com/en-us/blog/why-incident-response-demand-will-grow-faster-than-expected
https://matthew-rosenquist.medium.com/why-cyber-attackers-benefit-more-from-ai-technology-than-defenders-98efd14ac664