I think Debian is probably pretty conservative in their updates. I also recommend checking out the needrestart package. It will tell you when a reboot is needed because of a newer kernel that was installed, or when a systemd service needs a restart.

But as another commenter noted, outside of self hosting, in enterprise businesses environments where you manage an army of servers, things look different. But then, these guys are paid to be on-call in the weekend for events like these. :)

Yeah, for businesses I can see that, but selfhosting, meh. I have just one personal server firewalled and Wireguarded, so the PHP vulnerability wasn't even publicly exposed. Even so, I have never had any issues with Debian's unattended security upgrades in the last 5 years.

In enterprise environments with a hundred servers, though, you will want to do something else than I do. :)

But even then, don't enterprises run a good WAF in front of their public web sites that would have received the patch automatically?

Don’t people use unattended upgrades? Crowdsec’s WAF AppSec or Cloudfare’s WAF also put out patches that would’ve caught these vulnerabilities before the official PHP patches were released.

Of course, those normally run once per 24 hours, which is a little late…

Okay, but what is meant with experience though. I didn’t read the entire article, did it say he was in the “industry” for forty years or that he has been programming for as long, which is very believable.

Well, we're talking (Debian's) security updates only here, not major PHP version jumps. :)

What the hell are you taking about?

I haven’t been to a barber in decades. I just let it go. I’m male with long hair. Fuck style. This is my style.

Why do you expose port 22 to the entire internet? Limit it to your own IP addresses and/or only allow access through your Wireguard/VPN ranges. Then changing the default port becomes meaningless.

wazuh

Oh hey, thanks for that. I have eyed Sandfly before for filesystem drift detection among other things, but I don't think they have a free tier (anymore?). I also ran into Lynis, which performs health and compliance scans of your systems. Lots of good information and general hardening advice from that.

Proton does not protect you from harm. It’s not a sandbox.

Not saved as Markdown files, but in a database. I prefer editing my own files when I need to. I prefer Silverbullet.

My German friends have told me for years that Nazis never went away. They are not “far-right”, they’re not neo-Nazis, they are Nazis. Gotta call them by their real name. Because this is real in Germany and also internationally and it should not be played down, like AfD is doing.

42 is from The Hitchhiker’s Guide to the Galaxy by Douglas Adams. They built an enormous computer called Deep Thought that was the most powerful ever built to calculate the answer to the Ultimate Question of Life, the Universe and Everything. The computer, after 75 million years of processing, came up with 42. The confused crowd that gathered to hear the answer did not understand. Turns out, 42 is the correct answer, but what is the question?

So after that, they decide to build another computer, which is planet Earth, to figure out the question.

It was still calculating when it was destroyed by the Vogons to make space for a hyperspace bypass.

I think you must be doing something wrong. Proton has been able to play pretty much everything without unsupported anti-cheat for a long while now.

It’s more likely the result of automated login attempts because your email is on a leaked list and they forced a password reset on you to protect your account.

It’s not even a theory in the scientific sense, like the theory of evolution is. There is no evidence involved, nor experimental data. Intelligent design was created as an “answer” to evolution, nothing more. It could be taught in a theological class, not biology.

Stack Overflow usage has always come with the condition that you understood what the answer was doing and that it actually applied to your problem, on top of feeling that it looked like a high quality solution to it instead of crappy code. I mean, I guess in that sense, the people who blindly copied everything from the internet were the first vibe coders…

Yes, but also cheat by poisoning his gladiator slave opponent before the match.

Iit’s an internal error that is not handled properly. They don’t want to tell you the exact error message and detailed information around that, because it would expose the internal state of the backend and that would be a security issue. There is really nothing more that they can tell you, except that a developer needs to look at this (and possibly thousands to tens or hundreds of thousands of similar logged errors) and they probably already are.

It’s got room service!