Jenkins amplification

Mon Feb 3 18:35:03 UTC 2020

On Mon, Feb 3, 2020 at 1:26 PM William Herrin <bill at herrin.us> wrote:
>
> On Mon, Feb 3, 2020 at 10:24 AM Christopher Morrow
> <morrowc.lists at gmail.com> wrote:
> > On Mon, Feb 3, 2020 at 11:45 AM Harald Koch <chk at pobox.com> wrote:
> > > Jenkins, like a zillion other developer-oriented tools, should never be deployed Internet-facing.
> > > Reflection attacks inside an enterprise are handled by HR. :)
> >
> > good golly, so glad everyone's enterprise is a hard candy version of same.
> > no need for these remote workers, or discontiguous offices, or
> > 'internet centric workforces'.
>
> VPN.

I love it when my home network gets full access to the corporate network!