But it is a DAMNED good sniff test to figure out if an IT/NT team is too dumb to live BEFORE they break your entire infrastructure. If they insist that the single most important thing is to turn it off on every machine? They better have a real good reason other than "it's hard"

[–] nightwatch_admin@feddit.nl 17 points 1 day ago (10 children)

It’s vulnerable af. And I mean really, it’s as bad as Netscalers or Fortigate shit. Like https://www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates/ or https://www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates/

Problem is, yes it’s hard to implement but it’s even a lot harder to get it properly secured. Especially because few people are using it, and not securing it is worse than disabling it.

[–] lena@gregtech.eu 26 points 1 day ago (2 children)

Just a heads up, you linked to the same article twice

[–] nightwatch_admin@feddit.nl 6 points 1 day ago

That’s odd, but truly sorry.

load more comments (1 replies)

load more comments (8 replies)

load more comments (11 replies)