Home / Articles / The attack surface you do not have / Versions / v1.2.0
The attack surface you do not have: what changed in v1.2.0
From v1.1.0 (2026-10-21, 7c8ad22c8) to v1.2.0 (2026-10-27, db67c5ce1), paragraph by paragraph.
0 paragraphs added, 0 removed, 3 changed in place, 51 unchanged. About 0 words added and 75 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names.
2 unchanged paragraphs
!shot cv-month.webp | images/ | A month of critical vulnerabilities in server software, from 22 September to 21 October 2026: PHP, Plex Media Server, SiteGuard, Palo Alto PAN-OS, Cisco Secure Email Gateway, Ahsay, Ivanti Connect Secure, Zammad, Fortinet FortiMail, Citrix NetScaler2026, and WordPress. Mymy exposure to each: none. | comparison
22 unchanged paragraphs, under In short {#in-short}, Today, PHP {#php}, A month I did not have to care about {#month}…
!shot cv-surface.webp | images/ | The attack surface compared.compared: Aa typical web product runs a web serverproduct, and runtime,these asites, framework and CMS, a database, admin panels and APIs, VPN and mail gateways, and file processing. These siteswhich run static files, the reader's browser,files and one upload server that stores ciphertext.server. | comparison
7 unchanged paragraphs, under A constraint I have been writing about {#history}, The constraint is speed {#speed}
!shot cv-speed.webp | images/ | TheWhat the constraint gives speed:gives: 45 live static sgit.ai sites, all static,sites in eleven weeks; 1,306 pages on this newsroom, with a meter and payments; 100+ users and customers across our vaults, sgit.ai and riskmandate.ai;weeks, and one server of our own, SG/Send, whichthat stores only ciphertext. | comparison
20 unchanged paragraphs, under Where the risk is going {#internal}, The question to ask {#question}, What this does not claim {#limits}…