4 ms·
Hmm. Isn't there something to be said about running a less popular stack so the drive-by zero days won't affect you as much? Sure there are slower fixes, but al
by technobabbler 5y ago
Hmm. Isn't there something to be said about running a less popular stack so the drive-by zero days won't affect you as much? Sure there are slower fixes, but also fewer people hunting for exploits. You're a less juicy target.
- GTP 5y agoI think it depends upon your threat model. If you are considering people scanning the Internet for servers vulnerable to the latest security bug then yes, if you're considering targeted attacks then slower fixes are worse.
- washadjeffmad 5y agoAh, the old "limit popularity by having unmanaged exploits" anti-exploit. I think being used by any high value targets (like a notable FAANG org) would preclude FreeBSD from this technique.