3 ms·
For systems exposed on the internet? * Try to avoid it in the first place. * Do research, minimize risk and make whatever compromises you are willing/able
by tjoff 2y ago
For systems exposed on the internet?
* Try to avoid it in the first place.
* Do research, minimize risk and make whatever compromises you are willing/able to make
* Isolate it
* Maintain, update and monitor it
At no point am I certain the software is secure.
- wruza 2y agoYou seem to include some absolute security, which is obviously nonexistent in this world (p!=0 for any event according to some models), into your internet exposure formula, when "minimize risk, make whatever compromises, update" is sufficient (to me) and everything above that is just worrying too much without having control. I think that's where we fundamentally disagree.
- tjoff 2y agoI really don't. Be aware of your threat model and the risks associated.