3 ms·
> I suppose the IT team got overwhelmed with requests to open up the firewall for people working from home during the pandemic and just opened it for the whole
by simiones 6y ago
> I suppose the IT team got overwhelmed with requests to open up the firewall for people working from home during the pandemic and just opened it for the whole internet.
I would expect access to source code to be strictly from a VPN with controlled IPs, people shouldn't be accessing such sensitive information directly from their IPs, exactly because it makes it very hard to control access.
- qiqitori 6y agoThere is one caveat there: when everyone comes from the same IP (the VPN server's IP) it makes it difficult to determine (from regular HTTP server logs) who accessed what (e.g., when you think that there may be an attacker on your network).
- kiallmacinnes 6y agoThat's (generally) not how a corporate VPN works. Each client that connects to the VPN gets it's own IP, just the same as every PC plugged into the physical corp net gets it's own IP. When you access an internal service, it's no different to a desktop on the LAN accessing it in terms of ability to identity the end user.
- dogma1138 6y agoCorpo VPN doesn’t do NAT usually.