4 ms·
We run these services on isolated machines.
by SkyPuncher 2y ago
We run these services on isolated machines.
- hypeatei 2y agoHow isolated? If it's an image processing service then it can't live in a vacuum and needs to talk to something else at a certain point.
- SkyPuncher 2y agoOnly accept in-bound requests. Don't provided it with any special credentials. Someone might still be able to get an RCE on them and burn a bit of money, but they certainly wouldn't be able to move laterally.