4 ms·
It should probably be loudly default-disabled or outright removed, that's a very, very unexpected feature. It's an unprecedented tool for moving laterally and g
by RL_Quine 5y ago
It should probably be loudly default-disabled or outright removed, that's a very, very unexpected feature. It's an unprecedented tool for moving laterally and gaining gigantic amount of access within internal systems. Nobody could possibly build a secure network around a VPN where the controller can bypass all isolation, containerization, and all access controls through a web interface on another machine.
- gunapologist99 5y agoAgreed. That's a bit terrifying!
- afeiszli 5y agoTotally fair. You've convinced us to put that into our next release. While that's a big flaw it's a simple fix, and it should be in the code base by the end of the week.
- RL_Quine 5y agoWell done.