3 ms·
> You can basically freeze a product and keep it running forever for pennies We’re moving to a security culture where a Cloud product not only has to be consta
by eastbound 4y ago
> You can basically freeze a product and keep it running forever for pennies
We’re moving to a security culture where a Cloud product not only has to be constantly rewritten to keep its features (not only upgrade libraries but also swap out the old Apache libs), but logs must be constantly inspected to address security risks, and GDPR issues have to be automatically lodged with CNIL. This “let’s keep this service only” has become as dangerous as leaving a Windows XP computer connected to the Internet.
- taeric 4y agoYes and no. Things do need monitoring and support. But hardening is doable, as well. With more and more use solidifying exactly what to allow. Upgrades and new features often make hardening tougher, due to a combinitorial explosion in exposed surface area.