4 ms·
Indeed. You'd expect a corporate IT system to be able to ssh as root into all their devices. And the cloud is even worse: if you get hold of the right IAM role,
by pjc50 8mo ago
Indeed. You'd expect a corporate IT system to be able to ssh as root into all their devices. And the cloud is even worse: if you get hold of the right IAM role, you can simply delete everything! That does usually get locked behind proper 2FA, but it's not impossible to phish even experienced admins once in a while.
- namibj 8mo agoCompare to the Facebook global BGP breakage and the amount of hands-on authorization that needed to happen to recover. And no, there are plenty systems you don't want to have root ssh on. Mainframes require 4-eyes administration to do more nuanced "root" things than picking up a sledgehammer and physically smashing drives.