@TheRegister And then along comes an Amazon Linux dev and explains how to develop it to bypass DNS related protections most OSs and VPNs employ > an attacker may be able to gain control of “trusted” network DNS https://mailarchives.bentasker.co.uk/Mirrors/OSSSec/2019/12-Dec/msg00018.html