I think Debian is probably pretty conservative in their updates. I also recommend checking out the needrestart package. It will tell you when a reboot is needed because of a newer kernel that was installed, or when a systemd service needs a restart.

But as another commenter noted, outside of self hosting, in enterprise businesses environments where you manage an army of servers, things look different. But then, these guys are paid to be on-call in the weekend for events like these. :)

Well, we’re talking (Debian’s) security updates only here, not major PHP version jumps. :)

Yeah, for businesses I can see that, but selfhosting, meh. I have just one personal server firewalled and Wireguarded, so the PHP vulnerability wasn’t even publicly exposed. Even so, I have never had any issues with Debian’s unattended security upgrades in the last 5 years.

In enterprise environments with a hundred servers, though, you will want to do something else than I do. :)

But even then, don’t enterprises run a good WAF in front of their public web sites that would have received the patch automatically?

Don’t people use unattended upgrades? Crowdsec’s WAF AppSec or Cloudfare’s WAF also put out patches that would’ve caught these vulnerabilities before the official PHP patches were released.

Of course, those normally run once per 24 hours, which is a little late…

Why do you expose port 22 to the entire internet? Limit it to your own IP addresses and/or only allow access through your Wireguard/VPN ranges. Then changing the default port becomes meaningless.

wazuh

Oh hey, thanks for that. I have eyed Sandfly before for filesystem drift detection among other things, but I don’t think they have a free tier (anymore?). I also ran into Lynis, which performs health and compliance scans of your systems. Lots of good information and general hardening advice from that.

This is not about scraping data.

Yeah, you have a prejudiced view of older people.

There are so many non-twitchy games, though, and hidden object games are not what they grew up with.

And maybe they like twitchy games. Platformers were among the first games older people played in their youth.

Why would older people prefer hidden object games?

deleted by creator

Why wouldn’t they? Linux is gaining market share.

Proton does not protect you from harm. It’s not a sandbox.

I found the Artemis app and it’s surprisingly close to Apollo and Voyager with Liquid Glass aesthetic and works just as well.

I do wonder about the electricity cost, though. I did some very rudimentary calculations once (so could have been way off) and found that my VPS at 7 euro a month with 500 GB SSD isn’t takt that expensive in comparison, could even be cheaper.

Yeah, I get it. I’d like to try a Raspberry Pi setup sometime. Maybe some home automation stuff. But I don’t require much and don’t want a server rack. I’m a developer, not a network engineer.

Why wouldn’t you recommend it? I’m running my VPS for many of those services just fine. It’s technically not selfhosted, because I’m not doing the infrastructure, but the end result is the same besides not owning the hardware and paying for the electricity bill.

My god. This timeline is so horrible.

Their AI agent doesn’t understand that.

I don’t think so. I think I could pull together something like this using AI and enough money/tokens, and without reviewing the code produced too much in a day, a few days for polish, after thinking about it. But I have the advantage of knowing backend, frontend, tech stacks, what works, etc. But I would have little to no knowledge over the code base and what it does outside of the visual.

In the end with these LLM models, you just describe what you want and they fill in the rest. No skill required, and that’s what scares me the most for our future.