floof.org
Pippin
Pippin friendica
I've had to be my own computer security person for the last 20 years, so why does it feel like *now*, specifically, I can't cope any more. Now, rather suddenly, it feels like in order to put anything online at all you need a whole team of people to be constantly on edge, ready to respond at a moment's notice. It's never felt as anxiety-inducing as in the last few months.
Link to source
3
Darkhorse WinterWolf πŸ‡ͺπŸ‡Ί
Darkhorse WinterWolf πŸ‡ͺπŸ‡Ί • mastodon (AP)
If that's not a rhetorical question (or a potato), I'd suggest that the barrier to entry for malicious activity has become so low. Sad times. And I do understand your feelings there.
Link to source
1
Pippin
Pippin friendica

@Darkhorse WinterWolf πŸ‡ͺπŸ‡Ί To be honest it's more the need to keep updating things and the number of things I've ended up looking after that can't easily be updated (or can't be updated at all) than any actual compromise I've had to respond to (thankfully I haven't had that in a long time). When reading about PHP2Shell there was a mention of an event of some kind back in August where apparently some company spent a lot of AI time finding a huge number of latent security bugs, so it could just be that this is a transient wave of disclosures and updates and that it'll die down as there are fewer bugs that current LLMs are capable of finding. But that's really just a guess.

(Ah yes, there it is: "as part of the OpenAI "Patch the Planet" project in August 2026" https://en.wikipedia.org/wiki/PHP2Shell)

@Darkhorse WinterWolf πŸ‡ͺπŸ‡Ί
Link to source
1
Darkhorse WinterWolf πŸ‡ͺπŸ‡Ί
Darkhorse WinterWolf πŸ‡ͺπŸ‡Ί • mastodon (AP)
I hope you're right and it is just transient.
Link to source
1