3 ms·
https://yunohost.org/#/security https://yunohost.org/#/security That is why I no host. Unless the system is kept up to date automatically it's going to be vul
by zimbatm 8y ago
https://yunohost.org/#/security https://yunohost.org/#/security
That is why I no host.
Unless the system is kept up to date automatically it's going to be vulnerable to something.
All the web applications also seem to be exposed to the Internet directly which makes things even more dangerous. They all seem to be running PHP, presumably under the same user, so it probably takes only one security hole to compromise the whole thing.
- fantyoon 8y agoActually even if the system is kept up to date it's going to be vulnerable to something. That's the fun thing about it.
- jasonjayr 8y agoA system like this, at least the parts that are not public needs to be put behind an authenticating proxy, in the style of Google's BeyondCorp system. That way, there's a very hardened authentication gateway that all the other various implementations can sit behind. The auth implementations of the individual components doesn't multiply your exposure. With CORS implemented, it could be pretty decent out of the box ....
- mnutt 8y agoYeah, having to keep a bunch of third party applications up-to-date seems at odds with "install a bunch of applications with no work". Sandstorm.io seems like the right way to go here, I wish it would gain more traction.
- ohiovr 8y agoYou can't get in without the key.