5 ms·
Parent comment is referring to software vulnerabilities running on the box itself, not vulnerabilities in your website. When Apache or whatever it is that you u
by chias 8y ago
Parent comment is referring to software vulnerabilities running on the box itself, not vulnerabilities in your website. When Apache or whatever it is that you use to serve your static website comes out with a vulnerability that allows RCE as root, it becomes a problem for you, even if your website is static.
FWIW I use Namecheap / Linode myself, and will probably never go back to shared hosting. But the flip side of that coin is you do need to manage it, regardless of the website you are hosting.
- bad_user 8y agoYou can configure that machine to automatically update itself, which is what I do. And I don't think GoDaddy or other managed hosting providers are doing a better job than this. Also FYI static websites have a much smaller surface of attack when compared to forever-vulnerable shit like WordPress.
- jacurtis 8y agoyes, this. Godaddy is not doing much more than auto-updating packages with security fixes. This is easily handled with most Linux VPSs (often automatically, in the case of DigitalOcean). I am pretty sure the Amazon Linux AMIs do this too on AWS EC2. And most other distros can turn this on once with one command. I don't think GoDaddy is going much deeper than this, so security is a moot comparison between the two. In fact most sites are hacked at the application level anyway, not the system level. So the real security hole is not something on Linux, but the actual wordpress site thats installed within it. Food for thought: 83% of hacked websites in 2017 were Wordpress sites. Source: https://sucuri.net/reports/2017-hacked-website-report https://sucuri.net/reports/2017-hacked-website-report
- clarry 8y ago> Parent comment is referring to software vulnerabilities running on the box itself, not vulnerabilities in your website. When Apache or whatever it is that you use to serve your static website comes out with a vulnerability that allows RCE as root Or you can opt out of this mess and run a simple server. Not as root. The update & maintenance treadmill can be slowed down to nearly a halt if you're ok using simple software that doesn't have a billion features and just as many bugs. Which, I suppose, someone running a static site would be quite willing to do.
- kakarot 8y agoI'm sure we all have fond memories of that time we sat our grandparents down when they wanted to make an anniversary site and explained to them how easy it was to run a simple server, after which they spun one up in a container and secured it no problem. Little old grandma just loves ssh'ing into her pet server every day to read her system logs.
- clarry 8y agoLittle old grandma ain't making sites with GoDaddy either, so why do you have to come up with such an irrelevant strawman. Please.
- kakarot 8y agoMy grandmother's website for her small business was purchased via GoDaddy. This was before those commercials even started airing. It's not a strawman at all. I am speaking from real experience, except for the part where my grandmother could tell you the difference between SSH and SSL.
- technion 8y agoGrandpa is exactly the target market for GoDaddy. Look who they've got advertising the company in Australia. http://yaffa-cdn.s3.amazonaws.com/adnews/live/images/yafNews/featureImage/screen-shot-2018-02-18-at-6.26.59-pm1.png http://yaffa-cdn.s3.amazonaws.com/adnews/live/images/yafNews...
- gigatexal 8y agomy website is run via containers that don't run as root...
- jacurtis 8y agoYes, with read-only volumes. These are awesome for security.
- zbentley 8y agoThey are useful for mitigating some kinds of attacks; I wouldn't go so far as to say they are a panacea for security in general.
- komali2 8y agoOh well in that case, you are 100% invulnerable to attack. ^ I know this statement appears absurd to you, so I'm wondering why you're posting as if it's true?