I had this exact thought yesterday. Shouldn't AI obliterate PaaS platforms like this one since it's super easy to build a bespoke CI/CD process now? Since it's bespoke, you can lock it down as much as you want. Attackers don't even know it's there. It's time to go back to `deploy.sh` and a VPS.
replyplatforms are better placed to guard against attackers
replyCertainly. They are also larger targets.
replyto me, this is a variant of security by obscurity and will not fare well in the LLM age
replyI suppose a smaller attack surface could be considered a sort of obscurity. Its also just practically less to defend.
replyif you're still doing that manually in 2026 you probably should not be self hosting anything of consequence or commercial liability
replyWhat's "that"? Running your own hardware, using a CLI to manage servers, or touching anything below your application layer?
replyobviously asking claude for commands to dig through logs? duh
reply