Zur Erklärung: Im Sommer hatte ich eine Untersuchung im Rahmen der "Hamburg City Health Study", die neben einem Komplettcheck von Kopf bis zu den Füßen auch zwei MRT beinhaltete. Eines des Herzens und eine des Kopfes.

In meiner Familie gab es einige Fälle von Hirnblutungen und Tumoren. Auch wenn das alles wohl nicht genetisch bedingt ist, sind es doch Erinnerungen daran, was im Kopf alles passieren kann.

@jerry That would be reasonable, but that wasn't how I read this thread.

I think not exposing the management interface is table stakes to "being a network person". But also I am not sure I have a problem with *any* firewall being on the Internet if it's not used as a VPN as well. I feel like nearly every firewall risk is either VPN or management interface related.

@jerry Unfortunately, I feel the general transition to cloud has made it seem reasonable to people for administrative interfaces to be available over the public Internet.

Meanwhile, I generally try to break all of my cloud services working over the public Internet. :D

@jerry You can secure all these firewalls much better not by putting them behind a firewall, but by not connecting them to the Internet at all instead.

@GossiTheDog

I've also thought about this, and had a similar realization. However, I considered what the human cost is of "5 9s", and how people have come to expect instant availability, instant convenience, and the way that's changed society.

I'm kind of ok with normalizing 95% even? Like companies used to have maintenance windows, etc. Critical services like healthcare and emergency centers can't do downtime obviously, understandably, so there will always be some segments of as close to 100% as possible. But maybe 100% as the standard isn't what we need.

None of which negates the issue of skill centralization, and loss of engineering talent within organizations that can't do HA deployments if it weren't for Cloudflare and Cloud anymore

Sensitive content Clicca per aprire/chiudere

It 'feels' like we created systems that are easily made insecure on accident.

If you leave a lot of bombs laying around that are hair triggered, at some point it's the system architecture that's the problem and not the users.

I mostly avoid certain domains because of this. I don't host services online because I don't know enough about them to keep them secure, though one day I will tackle that, and I have in the past, but I have just found it easier to avoid it for now.

Vibe reponse is the only way to handle the volume of alerts from all the things.

Shared a thousand files with a yahoo address? Looks fine. I have a cookie tin to investigate with higher priority.