3 ms·

Here are my advice: 1. once compromized, start with a fresh copy. Use ansible to define automatic installation scripts so that the server can be fully reinstal

by chmike 10y ago

Here are my advice: 1. once compromized, start with a fresh copy. Use ansible to define automatic installation scripts so that the server can be fully reinstalled in a "snap". Use backups of the user data to restore. 2. Automate upgrades. It's a piece of cake with ansible. 3. Stay away from php. There are too many potential loopholes. I now start using go to implement my web servers. Especially if the web site is static. Check Hugo or tools like that. I implement dynamic servers with go and Iris that uses fasthttp.

noinsight 10y ago
> I now start using go to implement my web servers. Then again, you can write buggy/insecure code in any language. I don't think I've seen any articles about potential security pitfalls when writing web services (or code in general) in Go. I'm actually interested if there's anything surprising out there.
- chmike 10y ago
  The difference is that we have a better control on what is being done when using a statically typed language. Of course it is always possible to create a vulnerability too.