6 ms·
"More and companies are opening up their firewalls outbound because it makes developers feel warm and fuzzy." - this is the actual issue, and should fail you in
by Piskvorrr 11y ago
"More and companies are opening up their firewalls outbound because it makes developers feel warm and fuzzy." - this is the actual issue, and should fail you in the audit: precisely because it is a major vulnerability which can be abused in 10^128 different ways.
Running around screaming "OMG OMG, the tool designed to tunnel over the network can be used to tunnel over the network, TEH SKY IS FALLING!!1!!!" is even somewhat funny in this context.
- LinuxBender 11y agoI don't recall even remotely suggesting the sky is falling. If nobody fixes this, it doesn't affect me. I have Multiplexing disabled everywhere that I care about. The constant news of companies getting popped is actually quite entertaining. The only thing folks may be concerned about is that if too many companies get popped, there may be some heavy handed legislation that starts to affect people. Even that I am perfectly fine with.
- Piskvorrr 11y agoahem "It also means, anyone using the defaults in OpenSSH is not PCI compliant."
- LinuxBender 11y agoI wouldn't worry. Not every auditor will catch this.
- Piskvorrr 11y agoWell, that's security through obscurity: planning to fail an audit if the auditors dig too deep, but betting on a surface-level inspection.