News for hackers. Stuff that matters.

A comment on Google Gemini routes personal Drive files and emails to human annotators. Parent comment

Re:Google Gemini routes personal Drive files and emails to h... by kevg123 on Monday November 09, 2026 @07:31PM (#50434489)
With a reverse proxy, your only public endpoint is port 443 and nginx or whatever webserver you choose. Sure, the web server might also have zero days but the attack surface is relatively small.
[ Parent | on HN ]
Re:Google Gemini routes personal Drive files and emails to h... by Gigachad on Monday November 09, 2026 @07:44PM (#50434593)
Which was enough exposure to get a shell on your server via the recent php exploit. If you run a public facing nextcloud server you need to be ready to update at least within an hour of patches releasing.
[ Parent | on HN ]
Re:Google Gemini routes personal Drive files and emails to h... by kevg123 on Monday November 09, 2026 @08:03PM (#50434721)
NextCloud AIO runs in Docker containers. Is there a known exploit for PHP2Shell from within Docker?
[ Parent | on HN ]
Re:Google Gemini routes personal Drive files and emails to h... by kevg123 on Monday November 09, 2026 @08:12PM (#50434792)
NextCloud AIO runs in Docker containers, so it'd be a jump to break out of that, but, yes, they could exfiltrate your data.

I guess it's choose your poison. What are?

P(companies&governments spying on you)

P(hacker stealing your files)

The impacts of the latter are probably more dangerous but unless you're a juicy target, I'd imagine most hackers are going to go for rich grandmas (sadly). So my gut feelings are ~0.95 and ~0.01, respectively.

[ Parent | on HN ]
Re:Google Gemini routes personal Drive files and emails to h... by Gigachad on Monday November 09, 2026 @11:25PM (#50436051)
For me I don't share that many files with others and the ones I do share are usually less confidential than the rest. So I run Nextcloud behind tailscale and put just the share files on google drive.

I might eventually look in to an automatic updates setup for nextcloud to keep up on patches faster than I could do it manually.

[ Parent | on HN ]