levelsio: get your servers off the public internet, now
His fix: Tailscale plus a Cloudflare Tunnel, because SSH keys alone won't stop AI-found exploits.
Indie maker @levelsio posted a blunt security warning on Friday: with so many people getting hacked, he says developers should take their VPS off the public internet and put it behind Tailscale and a Cloudflare Tunnel as soon as possible. In his view, SSH keys alone won't protect a server from the exploits AI is now finding.
The idea is to stop exposing open ports at all. Tailscale creates a private network between your own devices, and a Cloudflare Tunnel lets a site be reached without opening the server directly to the internet.
Why it mattersThe warning landed on the same day other posts on this board flagged new PHP, Node.js and Java security issues. It reflects a growing view that AI-assisted bug hunting is shrinking the time between a flaw existing and someone exploiting it. The post drew about 925 likes.
