[largbae]

I think the point is that the perimeter security doesn't provide the security that the client imagined. Gaining root on any endpoint in the network (and then finding an endpoint you can control anywhere else on the internet) gives you a way in and out of the company network.

[anderspitman]

You don't even need root. All the important bits can be done in userspace.