How to Lose your Job with SSH, part 1

A less sensational title for this post would have been "SSH Remote Forwarding," but that's not nearly as fun.

I used to be responsible for one of the few entry points into a global network. The company had actual manufacturing secrets — their products included various machines of war. We had internal firewalls to protect sites from each other, even when the site didn't have Internet access. All Internet connections had to go through proxies. We did not allow external DNS to reach the desktop. ...