Post #2855095

@thedarktangent@defcon.social I've run my own of these in the past, but don't anymore. I think it's worth considering the risks: A) you can run your own, but need to stay on top of things at all times. That means installing security patches as soon as they're available, but also checking your configuration remains appropriate across updates, and keeping up with relevant reports. or: B) you can outsource to a third party, but you better be sure they're trustworthy. That means trusting them to do all the work of A, as well as relying on them to not work with 'other third parties that don't have your best interests in mind'. For me, as well as for many other technically able people, the work of A is not our day job and becomes too onerous to sustain (which is the crucial part), so B becomes necessary, despite the highlighted risks.