Hacker News Reader

I think it's unfair to blame this on no-ops. People have found unsecured MySQL ports on the open internet for years dating back to the first LAMP stack deployments. And things like iSCSI targets, SMB shares, etc.

View on HN

Two years ago I was looking at rsync shares - still thousands of them out there, unsecured:

https://blog.steve.fi/Secure_your_rsync_shares__please_.html

There's still a lot of rsync out there (~160,000): https://www.shodan.io/search?query=rsyncd

bad-ops is of course also a thing, and mostly comes from the same mindset ("how hard can it be?", and "why do I pay so much for this stuff?"), but I personally believe that the concept of no-ops is hilarious. Treating infrastructure as code is fantastic, but developers and ops people have different priorities, skillsets and approaches. Neither are dispensable in any kind of serious environment.

Well, no ops is not really no ops, but more "Google/Amazon is paying ops people for me".

Reply on news.ycombinator.com