Conversation

Notices

1. Embed this notice
   Taggart :donor: (mttaggart@infosec.exchange)'s status on Friday, 15-Nov-2024 02:31:11 JST Taggart :donor:

   I struggle to think of a legitimate purpose for Dev Tunnels that is not offered by an alternative. I'd block devtunnels[.]ms outright.

   https://newtonpaul.com/tunneling-c2-through-microsoft-dev-tunnels/

   • Embed this notice
     she hacked you (ekis@mastodon.social)'s status on Friday, 15-Nov-2024 02:31:31 JST she hacked you

     in reply to

     @mttaggart You mean an inverse proxy? Really can't think of any legitimate uses? It can expose web servers or other web services, while keeping them locked deeply in a secure network

     Cloudflare business in essence is based on the usefulness of inverse proxies