217

Google pays $250K for Linux vulnerability allowing guest VM escapes (arstechnica.com)

submitted 1 day ago by possiblylinux127@lemmy.zip to c/selfhosted@lemmy.world

51 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[+] atzanteol@sh.itjust.works -9 points 12 hours ago* (last edited 12 hours ago)

See what I mean?

As if a proxy blindly passing traffic directly to a backend server "reduces attack surface" in any meaningful way. 🙄

Edit: Guy edits his post with a bunch of stuff and assumes I've read it later. I can't eyeroll enough...

You've increased your "attack surface" by adding a second application to the stack. Proxies aren't magic, they are also targets.
Sure - you can do those things on a proxy. How many people here are? And why are those things never suggested when people here say "use a reverse proxy"? Because they think the proxy is the security.

[-] nibbler@discuss.tchncs.de 2 points 12 hours ago

Did you just add 'blindly passing traffic' to your statement? Did you read my comment about can help?

Move on, joker.

[-] atzanteol@sh.itjust.works -5 points 12 hours ago* (last edited 12 hours ago)

Sorry - which part of your comment added anything of value? "can help to minimize the attack surface"? 99% of the time a proxy just passes traffic through. Unless you're talking about a WAF which is a) a different thing and b) NOT what any home gamers are talking about when they recommend nginx, traefik, etc. to newbs.

[-] nibbler@discuss.tchncs.de 1 points 12 hours ago

Lol

[-] atzanteol@sh.itjust.works -1 points 12 hours ago

Enjoy your "security". 🙄

[-] Ptsf@lemmy.world 0 points 9 hours ago

You can't be real 😂 best laugh I've had in a while. Thanks for that.

this post was submitted on 11 Jul 2026

217 points (98.2% liked)

Selfhosted

60623 readers

857 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world