Ask HN: Have you changed your setup in the age of AI and mass vulnerabilities?

3 pointsdysoco2 comments

I'm curious if given all the recent advancements in LLMs but also news about hacks, vulnerabilities and exploits anyone has changed substantially their setup (OS, devices, tools, security policies, etc.)

Have you reduced your surface of attack? Searched for more isolated environments? Started using Nix thanks to agentic aid? Stopped using IDEs and other tools you used for years?

View on HN

I’ve been wanting to post almost this identical question. I’ve been on Ubuntu lts for a few years, and Fedora before that. I’m constantly back and forth in my head on running more up to date -> less known CVEs, or older, more tested code that has less chance of a malicious commit slipping slipping through.

Tools wise, I keep a very minimal desktop and virtualize anything I need. Or, occasionally I’ll use an old desktop/laptop to host something if I need bare metal.

Yes. I keep two package.json files for my Node.js application. One has all the trillions of dev dependencies and the default one has almost no dependencies. This way my application does not trip any dependency security alarms.

Reply on news.ycombinator.com