6 ms·
Very cool, but this is a security anti-pattern. Having the auth, db and file server in the same service.. an attacker doesn't even need lateral traversal or pr
by TruthWillHurt 3y ago
Very cool, but this is a security anti-pattern.
Having the auth, db and file server in the same service.. an attacker doesn't even need lateral traversal or privilege escalation once inside..
- deberon 3y agoThere’s something to be said about drastically reducing your threat surface too. Locking down 1 server is easier than locking down a fleet. You can still have security in depth inside your server.