Re:Ask HN: How do you securely self-host a server?
by bob1029 on Wednesday March 09, 2022 @03:09PM
(#30619367)
Your security objectives are important if you are hoping to make any meaningful progress.
Are you concerned about DDOS? If yes, then don't self-host or use CF Tunnels.
Are you concerned about someone hacking your site with a buffer overflow? If yes, then make sure you patch frequently.
Are you concerned about someone hacking your site with any variant of a 0-day? If yes, then you need to air-gap and/or not use a computer at all.
Are you concerned about crappy business logic letting a bad session in? If yes, then you are in the wrong rabbit hole. You should be fixing your software until it provides the necessary degree of confidence. This has nothing to do with the server or hosting.
I don't think any of the above are modulated by self-hosting vs AWS hosting.
Are you concerned about DDOS? If yes, then don't self-host or use CF Tunnels.
Are you concerned about someone hacking your site with a buffer overflow? If yes, then make sure you patch frequently.
Are you concerned about someone hacking your site with any variant of a 0-day? If yes, then you need to air-gap and/or not use a computer at all.
Are you concerned about crappy business logic letting a bad session in? If yes, then you are in the wrong rabbit hole. You should be fixing your software until it provides the necessary degree of confidence. This has nothing to do with the server or hosting.
I don't think any of the above are modulated by self-hosting vs AWS hosting.