Security Researcher: Don't Run Your Own Online Services Without a Security Team
davidmanheim · x · 2026-10-23
davidmanheim offers personal security advice: first, always enable 2FA and update anything online; second, if you're doing something complicated, don't run your own web servers or online services without a cybersecurity team — and even then, worry and set up proactive monitoring. He half-jokes that you should pray nobody cares enough to spend money on tokens to seriously attack you — a nod to AI-driven attacks lowering the cost of targeted intrusion.
More from Safety
- Security must shift left: patched exploits now spread at near-zero cost worldwide — fforres · 2026-10-23
- Anthropic's anti-distillation defense cuts attacks 90-99%, but expert data is still for sale — johnkorrigan · 2026-10-23
- Stanford HAI fellow testifies to California Senate on AI agents' privacy and accountability risks — StanfordHAI · 2026-10-23
- Privacy check: 5 of 8 local AI agents ship telemetry on by default — GapNew4766 · 2026-10-23
- Bad AI agents can take down unpatched PHP sites in minutes, developer warns — saibharadwaj · 2026-10-23
- AI agents fuel real-world intrusions: 2,250 M365 tenants hit, 100+ firms compromised — cyb3rops · 2026-10-23