Hacker News Reader

I wonder how many Jenkins exploits will lead people to put their Jenkins hosts behind a perimiter? When is enough enough?

Jenkins should be behind a perimeter regardless of active exploits, leaving it open to the public internet is just asking for trouble.

Yeah, but some people still seem to think leaving it out there is a good idea. It baffles me frankly.