3 ms·
You'd have to be utterly incompetent to make a self-configured VPS have more attack surface. I have a FreeBSD server, three open ports: SSH with cert-login onl
by zilti 3y ago
You'd have to be utterly incompetent to make a self-configured VPS have more attack surface.
I have a FreeBSD server, three open ports: SSH with cert-login only, and http/https that go to nginx. No extra ports or pages for potentially vulnerable config tools.
- oefrha 3y agoGiven the huge number of wide open production Mongo/ES/etc. instances dumped over the years, I wager having heard of ufw puts you among the top 50% of people deploying shit.
- llm_trw 3y agoThis whole thread is incomprehensible to me. I guess no one knows how to harden an OS anymore so we just put everything in a container someone else made and hope for the best.
- headmelted 3y agoI don’t think we need to be calling people incompetent over a disagreement. Are you suggesting that not opening the ports to any other services means they’re no longer a vulnerability concern? That would be.. concerning.