Unfortunately, there are a lot of people not "in their right mind" that work in I.T. About 18 months ago, I was asked to look into an issue one of our customer

Unfortunately, there are a lot of people not "in their right mind" that work in I.T. About 18 months ago, I was asked to look into an issue one of our customers was experiencing (we're primarily an ISP but we also provide some managed services to our customers as well). They had several Windows (2003 and 2008) servers sitting on the public Internet, with public IP addresses, not behind a firewall. Among several other "WTFs?", their primary domain controller was being used 24/7 in DoS (amplification) attacks by way of the DNS service. Of course, every other port that Windows exposes by default was open and accessible to the world on this machine (and several others). Don't underestimate the clusterfucks that can happen when so-and-so's nephew who is "good with computers" is allowed to run things.