You can scratch Cisco from the list - they just announced they will re-vibecode all of their codebase! So there will not be any explots for their hardware in the future - one way or the other. ;-)

My hate for hyperscalers is greater than my hate of being SRE.

It's time to leave GCP, AWS, and the rest.

Google and Amazon markup can eat it. Fuck those guys.

Let's not forget that Google and Amazon tried to offshore us, played a role in inventing the labor-displacing models in the first place, and that don't give a shit about any of us.

I hope they ossify and turn into the next IBMs.

They thought AI would lead to growth and a greater concentration of wealth for themselves, but it's actually the seeds of their own destruction and dismantlement.

Or there's some exploit in an endpoint device, and the problem moves laterally from inside your firewall.

Yep, but the attack surface is much smaller!

yeah remove the door locks, the thief can just break the window

Good like trying to explain to your customers that their data is no more accessible because some api key ended up in a public git repo or since you admin panel is exposed to whole internet someone was able to log in.

With the speed of exploitation hitting right now your analysis will be out of date in a few weeks to months. We are about to have very palpable fear hitting all software vendors. It will be seen as irresponsible to use centralized systems

Especially when the customers' own websites or services are down, they are a lot more understanding.

And so? This is true for any kind of infra!

You can't defend yourself from everything, but you can try to make you life easier by reducing the attack surface and make side movements more difficult.

Having employees (or system like bastion hosts) with unrestricted access is one of the recurring mistakes in such events. I can’t understand it.