# The attack surface you do not have: what changed in v1.2.0, sgit.ai

> The changes to the article "The attack surface you do not have" in v1.2.0, paragraph by paragraph.

*Source: <https://newsroom.sgit.ai/articles/versions/the-attack-surface-you-do-not-have/v1.2.0.html> · sgit.ai v0.7.87 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a `.md` twin; internal links below point at them.*

---

[Home](../../../index.md) / [Articles](../../index.md) / [The attack surface you do not have](../../the-attack-surface-you-do-not-have.md) / [Versions](../the-attack-surface-you-do-not-have.md) / v1.2.0

# The attack surface you do not have: what changed in v1.2.0

From v1.1.0 (2026-10-21, `7c8ad22c8`) to v1.2.0 (2026-10-27, `db67c5ce1`), paragraph by paragraph.

0 paragraphs added, 0 removed, 3 changed in place, 51 unchanged. About 0 words added and 75 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names.

[← v1.1.0](v1.1.0.md) · [all versions](../the-attack-surface-you-do-not-have.md)

2 unchanged paragraphs

!shot cv-month.webp | images/ | A month of critical vulnerabilities in server software, from 22 September to 21 October 2026: PHP, Plex Media Server, SiteGuard, Palo Alto PAN-OS, Cisco Secure Email Gateway, Ahsay, Ivanti Connect Secure, Zammad, Fortinet FortiMail, Citrix NetScaler2026, and WordPress. Mymy exposure to each: none. | comparison

22 unchanged paragraphs, under In short {#in-short}, Today, PHP {#php}, A month I did not have to care about {#month}…

!shot cv-surface.webp | images/ | The attack surface compared.compared:Aa typical web product runs a web serverproduct, and runtime,theseasites,framework and CMS, a database, admin panels and APIs, VPN and mail gateways, and file processing. These siteswhich run static files, the reader's browser,files and one upload server that stores ciphertext.server. | comparison

7 unchanged paragraphs, under A constraint I have been writing about {#history}, The constraint is speed {#speed}

!shot cv-speed.webp | images/ | TheWhat the constraint gives speed:gives: 45 live static sgit.ai sites, all static,sites in eleven weeks; 1,306 pages on this newsroom, with a meter and payments; 100+ users and customers across our vaults, sgit.ai and riskmandate.ai;weeks, and one server of our own, SG/Send, whichthat stores only ciphertext. | comparison

20 unchanged paragraphs, under Where the risk is going {#internal}, The question to ask {#question}, What this does not claim {#limits}…

[← v1.1.0](v1.1.0.md) · [all versions](../the-attack-surface-you-do-not-have.md)


---

*[Site index for agents](../../../llms.txt) · [HTML version](https://newsroom.sgit.ai/articles/versions/the-attack-surface-you-do-not-have/v1.2.0.html)*
