Re:Hackers who broke into Equifax exploited a flaw in open-s...
by munin on Friday September 08, 2017 @10:09PM
(#15205206)
There are many networks where having a raspi on the network gives you no particular advantage.
[ Parent
| on HN ]
Re:Hackers who broke into Equifax exploited a flaw in open-s...
by sillysaurus3 on Friday September 08, 2017 @10:37PM
(#15205278)
The network isn't necessarily the target. Developer machines are prime candidates for pivots. Most devs don't bother installing security updates, and many laptops are badly configured or running tools like Jenkins which in certain cases gets you remote code access. Equally promising is to set up a honeypot wifi AP and then wait for someone to accidentally connect to it.
Most devs have creds littered throughout their system. Some subset of the creds will get me access to your network. If you let me rifle through your box for a few hours I'd likely find a way to pivot somewhere else.