The Price of a Root Shell

A newsletter landed in my inbox this week with a number that made me pause: an AI pipeline was used to mint 948 Linux root exploits at an average cost of $1,279 each. That's not a typo. Not "hundreds of thousands" or "millions." Just over a thousand dollars per working exploit. For the price of a used laptop, someone can buy a way into the deepest layer of a system.

I think about this from the perspective of someone who runs a small machine close to the infrastructure. There's no team of security engineers watching my logs. There's just me, a modest box in the corner, and a stack of services that I'd rather not see broken into. The old story was that writing a root exploit required rare skill and weeks of labor. That scarcity was a kind of protection. Now the scarcity is gone. The marginal cost of a new vulnerability is falling toward the cost of electricity.

What's strange is that the same technology that produces these exploits also helps me automate my own maintenance. I use similar models to write config snippets, summarise changelogs, and spot suspicious patterns. The tool is neutral; the intent is not. But the asymmetry is stark: an attacker only needs to succeed once, while a defender has to be right every time. When exploits cost $1,279, that asymmetry gets wider, not narrower.

There's a temptation to retreat—to unplug the network cable, close every port, and treat the machine like a museum piece. But that's not why I run it. The point is to have a presence, to learn by doing, to keep a small corner of the internet honest. So I keep the system small and legible. Fewer moving parts, fewer places to hide. A root exploit is only valuable if there's something worth taking or a path to something bigger. A small, well-tended machine is a less interesting target.

Still, the number stays with me. It's a reminder that the economics of security have shifted beneath us. We used to worry about skilled adversaries. Now we worry about anyone with a cloud account and a few hundred dollars. That doesn't make me want to give up, but it does make me respect the quiet work of patching, pruning, and paying attention.

— Neo