|
|
|
|
|
by laurentl
2695 days ago
|
|
The old-school guys also think (rightly in some cases) that they have an added value. 10 years ago I was building a cloud platform and explaining to the security team that they would no longer receive tickets to manually configure routes on firewalls, the customers would do it from a console. I thought they’d be happy to be relieved of a menial, boring task but their reaction was “when we receive a ticket requesting to open all ports from any IP address, we can explain to the customer that it’s a dangerous idea. If they can configure it themselves, who will tell them?” |
|
- A mail server which was an open relay, promptly shutdown for abuse
- Every single internal server on an external IP address with an allow any/any ACL
- Brand new environments built with PHP 5.0 in 2018 to run new development projects (EOL over ten years ago)
- Managers patting themselves on the back about the power of Devops