News for hackers. Stuff that matters.

A comment on Sovereign: Ansible playbooks to build and maintain your own private cloud. Parent comment

Re:Sovereign: Ansible playbooks to build and maintain your o... by grosswait on Thursday January 30, 2020 @06:13PM (#22197007)
How is Ansible a security disaster?
[ Parent | on HN ]
Re:Sovereign: Ansible playbooks to build and maintain your o... by eeZah7Ux on Friday January 31, 2020 @01:46PM (#22204299)
A system designed to SSH into production host with high privileges and make changes automatically instead of enforcing staging...
[ Parent | on HN ]
Re:Sovereign: Ansible playbooks to build and maintain your o... by apple4ever on Sunday February 02, 2020 @10:39AM (#22217359)
That’s not really a security disaster unless you consider all of SSH a security disaster.

If you are concerned about Ansible SSH’ing in (which means you are concerned about any person SSH’ing in), you just do the standard SSH hardening.

[ Parent | on HN ]
Re:Sovereign: Ansible playbooks to build and maintain your o... by eeZah7Ux on Sunday February 09, 2020 @08:55AM (#22282103)
...and yet SSHing on a production system to make configuration changes is prohibited in many large companies including some FAANGs.

Because you (or some intern hired a week ago) are 1 typo away from making a disaster.

For the record, security includes availability and this is an availability risk.

[ Parent | on HN ]