nanog mailing list archives

Re: Jenkins amplification


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Mon, 3 Feb 2020 13:35:03 -0500

On Mon, Feb 3, 2020 at 1:26 PM William Herrin <bill () herrin us> wrote:

On Mon, Feb 3, 2020 at 10:24 AM Christopher Morrow
<morrowc.lists () gmail com> wrote:
On Mon, Feb 3, 2020 at 11:45 AM Harald Koch <chk () pobox com> wrote:
Jenkins, like a zillion other developer-oriented tools, should never be deployed Internet-facing.
Reflection attacks inside an enterprise are handled by HR. :)

good golly, so glad everyone's enterprise is a hard candy version of same.
no need for these remote workers, or discontiguous offices, or
'internet centric workforces'.

VPN.

I love it when my home network gets full access to the corporate network!


Current thread: