3 ms·
That's what I meant by being a needle rather than a haystack -- one of many Keycloak instances rather than client to one big SaaS provider. BTW Keycloak.curren
by spacemanmatt 5y ago
That's what I meant by being a needle rather than a haystack -- one of many Keycloak instances rather than client to one big SaaS provider.
BTW Keycloak.current has tossed JBoss & friends for Quarkus. In any case, it's been a remarkably safe product over the years.
- tatersolid 5y agoIt doesn’t matter if you’re a “needle” if Shodan has a list of all “needles” readily available to attack. Even script kiddies can write for loops. Proxyshell and similar recent issues have shown “near-instant compromise” to be the current state of affairs. Most instances are attacked within hours or even days before a vulnerability is disclosed publicly and hits the news.