Posted by Schweiss, Chip on Feb 17
Apparently, leaving all security up to the end user is okay with Puppet Labs.I stumbled across some rather alarming search results when looking for
an explanation to a message on my own dashboard:
http://goo.gl/m99l6
There are numerous Puppet Dashboard's exposed directly to the Internet
and indexed by Google. By default Dashboard runs on port 3000, so
these are only sites that have reconfigured to run on port 80. A
machine search for...