It's much easier to protect yourself if you have your infra behind a perimeter firewall you control.

roadside_picnic an hour ago | parent | next [-]

It's also harder to explain to your customers why you're the only product they use that has a security problem when an exploit does eventually happen.

You see this already with uptime. If Github or AWS has a major outage, it's in the news and even people that don't understand software realize it's just "something happening today, everything is down".

And, unfortunately, in practice customers don't care about this inverse, when "everyone else is down but not that one product".

	▲	frankchn 26 minutes ago \| parent [-]
		Especially when the customers' own websites or services are down, they are a lot more understanding.

▲

nradov an hour ago | parent | prev | next [-]

Until the attacker bypasses your perimeter firewall by convincing an employee to download and install malware.

	▲	mlhpdx 7 minutes ago \| parent [-]
		Having employees (or system like bastion hosts) with unrestricted access is one of the recurring mistakes in such events. I can’t understand it.

▲

0xWTF 3 hours ago | parent | prev | next [-]

Until there's a exploit for Palo Alto, Juniper, Cisco, F5, <pick your defender>.

▲

m4rtink 3 hours ago | parent | next [-]

You can scratch Cisco from the list - they just announced they will re-vibecode all of their codebase! So there will not be any explots for their hardware in the future - one way or the other. ;-)

	▲	taneq an hour ago \| parent [-]
		This solving the problem once and for all.

▲

kube-system an hour ago | parent | prev | next [-]

Or there's some exploit in an endpoint device, and the problem moves laterally from inside your firewall.

▲

vb-8448 3 hours ago | parent | prev | next [-]

Yep, but the attack surface is much smaller!

▲

echelon 2 hours ago | parent | prev | next [-]

My hate for hyperscalers is greater than my hate of being SRE.

It's time to leave GCP, AWS, and the rest.

Google and Amazon markup can eat it. Fuck those guys.

Let's not forget that Google and Amazon tried to offshore us, played a role in inventing the labor-displacing models in the first place, and that don't give a shit about any of us.

I hope they ossify and turn into the next IBMs.

They thought AI would lead to growth and a greater concentration of wealth for themselves, but it's actually the seeds of their own destruction and dismantlement.

▲

InsidiousWombat 3 hours ago | parent | prev [-]

yeah remove the door locks, the thief can just break the window

▲

buremba 3 hours ago | parent | prev [-]

[dead]