The big hardening keeps growing

Words
377
Reading
2 min
1h
Listen to this post
~3 min

Thanks to AI, we are discovering way more bugs on languages that could be structural to our ecosystem. PHP is an old but highly used language online, and this account for 70% of the internet's website. But there could be others on Apache, MySQL, Linux C code and others which could threaten the whole stack and ecosystem.

The reality is that is not only PHP, but Node.JS, Python and many others. The whole web layer is compromised. And this is way more mainstream than what we saw on our own universe of Bitcoin and crypto. But it could also blow up to commercial grade languages like C#, Java and others. The big threat is that we won't know about it. IIS, Sharepoint, Oracle Web Application, IBM Websphere, etc.

Banks, Oil companies, Insurance companies and any other high level corporation with private datacenters and highly confidential information could be attacked their memory stack and exploit their whole data banks for password, user information and other. We only know open source because they are open about their audits. Microsoft has already produced huge dumps of security advisories, and we haven't really looked at Oracle or IBM as much because we consider them too boring of companies to be bothered. However the reality is that they have most of the corporate world's servers.

Doing more research, my prediction seems to be true as I've just watched patches issued over different security advisories from different systems about these remote code execution issue. Even on GNU/Linux kernel mailing list, security issues to the SMB servers seem to be vulnerable to these type of attacks. Microsoft Sharepoint also patched a recent code execution based vulnerability on their system and my guess is that other web application servers like Oracle and IBM had similar issues.

Here is where a bunch of things are starting to pop up and other languages are being touched for different or related issues.

Not sure if we have seen the end of this security crisis, my guess it hasn't and we could be watching a tsunami of bugs hitting our infrastructure, whenever private or public. What are your thoughts on what's going on? Would we come out stronger than ever or would we have a cyberpandemic of security holes?

The big hardening keeps growing | Ecency