No, it's released.
doeknius_gloek
joined 2 years ago
Security in software is about implementation, not different programming languages. Security as a whole is also not something you can achieve just by installing "secure" software - every software has bugs and vulnerabilities. Some of them are known, others are unknown and not every one of them automatically poses a security risk to you, this depends on the bug, your usage and environment. You can try to harden your system, but you need to do this in layers and the application code is just one of them.
For example, you could geoblock IP addresses so their requests never even reach your application. This does not mean that you're automatically safe from attackers from e.g. Russia, but you make yourself a less easy target.
There are many other defense mechanisms like request limiting, dynamically blocking malicious requests with something like Fail2Ban, strong authentication, frequent patching, network segregation, virtualization, and so on. I hope you see where I'm going. Security is complex and depends a lot on your personal threat model.
That being said, if you need to know how secure the code of a given software is, you need to find something that has recently been audited or audit it yourself.
With the recent happenings with Synology/Plex, I’ve decided it’s time to make the move and up my self-hosting game, just need some input from the veterans to solidify my plan and put it into action.
I might be cynical, but moving away from Synology and Plex because of the writing on the wall and then choosing Unraid probably won't end well.
Don't get me wrong, I understand the love for Unraid even though I don't use it. It looks nice and newbie-friendly and you can throw all your random disks at it regardless of size. But enshittification will come for Unraid and I personally think that it has already begun.
view more: next ›
Looks like the front fell off.