This PHP exploit is an example of how and why most people should not be administering their own server, and I specifically do not want to be. (I do run a server and have patched it.) Applying patches and watching security advisories is just not what I want to be doing with my days.
0 Boosts
0 Likes
@ben well on Debian updates comes down automatically every day and as a security update they can also be applied automatically if you enable unattended-upgrades.
In my case the PHP patch wouldn't have been downloaded until tomorrow, but I decided to do a refresh and get and apply it early.
My main concern is that AI and vibe coding to find and hallucinate patches for security holes is so common these days that automatically applying security updates is not as safe as it used to be.
@ben while I agree it is not super nice to do, it gives you a nice feeling of an active and protective community. Without it, you just rely on the trust to one provider.
@ben me neither...and it's part of my job! ;-)
@ben it's kinda fun though