5 ms·
Some attacks exploit vulnerabilities in dev infrastructure. Exposed dev JWT token may enable such an attack.
by notimetorelax 6y ago
Some attacks exploit vulnerabilities in dev infrastructure. Exposed dev JWT token may enable such an attack.
- onion2k 6y agoThis is precisely why my comment makes it clear that dev shouldn't be available to the outside world.
- woogley 6y agoSecurity in layers. You should keep your dev environment private but also not paste credentials into a networked textbox.
- beardedwizard 6y agoThis, I can't believe we are even debating it...
- dathinab 6y ago"making things not available to the outside world" Has been proven repeatedly to not reliable work. And security model must assume a attacker somehow got access to the VPN it whatever you use for isolation. If not it's not a reliable security model.