alt Hacker NewsYou could have a new web server and database too. Maybe a new one every other day created from a cronjob so you aren't a stationary target.
You could have a new web server and database too. Maybe a new one every other day created from a cronjob so you aren't a stationary target.
I was saying that you could just not have exploitable bugs, at least of the memory-safety variety that was on display in PHP2hell, not that you could mitigate the exploitability of the exploitable bugs you will inevitably have.
Which, probably, you will also have to do.
I suspect that a more effective mitigation to having exploitable bugs would be to have an LLM read all your HTTP requests and the actions the web server proposes to take in response and give a Jev-like approve/disapprove decision.