Re:Security by obscurity is underrated
by tptacek on Friday September 11, 2020 @09:02PM
(#24448942)
You're asking for my opinion, and that's all I can relate, but here's my ranked ordering of things likely to have RCE vulnerabilities, from least to most secure:
* A Java, Python, or Ruby app server
* OpenVPN
* Stock nginx
----- starts to get really unlikely right here ----
* A Java, Python, or Ruby app server
* OpenVPN
* Stock nginx
* OpenSSH* The Linux IP stack
* WireGuard