Comment on Keep Tier-One Applications Out of Virtual Environments

CameronDev@programming.dev ⁨1⁩ ⁨month⁩ ago

• redfox@infosec.pub ⁨1⁩ ⁨month⁩ ago

  Lol, even in 2024 with free VPN/overlay solutions…they just won’t stop public Internet exposure of control plane things…

  source
• umami_wasbi@lemmy.ml ⁨1⁩ ⁨month⁩ ago

  Well. Misconfiguration happens, and sadly, quite often.

  source

  • CameronDev@programming.dev ⁨1⁩ ⁨month⁩ ago

    Sure, but the author makes it sounds like thats its their standard way of doing things, which is insane.

    And if you do have a misconfiguration, the rational thing is to fix that, not dump the entire platform.

    source
• terminhell@lemmy.world ⁨1⁩ ⁨month⁩ ago

  True horrors

  Like, that’s what vpns and jump boxes are for at the very least.

  source

  • CameronDev@programming.dev ⁨1⁩ ⁨month⁩ ago

    Wanna bet they expose SSH on port 22 to the internet on their “critical” servers? 🤣

    source

    • terminhell@lemmy.world ⁨1⁩ ⁨month⁩ ago

      Ive been tempted to setup a Honeypot like this lol

      source

      • CameronDev@programming.dev ⁨1⁩ ⁨month⁩ ago

        You’ll definitely get lots of login attempts. I used to have a port 22 ssh, hundreds of attempts per day.

        Would be interesting to see what post login behavior was.

        source