LWN.net Logo

Brute-Force SSH Server Attacks Surge (InformationWeek)

Brute-Force SSH Server Attacks Surge (InformationWeek)

Posted May 14, 2008 17:45 UTC (Wed) by martinfick (subscriber, #4455)
In reply to: Brute-Force SSH Server Attacks Surge (InformationWeek) by a9db0
Parent article: Brute-Force SSH Server Attacks Surge (InformationWeek)

"security by obscurity" is just a term that is thrown around strangely anyway and provides
nothing of value to a conversation, ignore it.  When it comes down to it you always need a
secret for these things.  Requiring more secrets can only increase your security, the question
is by how much and what is the tradeoff?  The answer to "how much?" is determined by the size
of the search space for each secret, are they random and are they changeable?  The last one is
the criteria that makes secret algorithms particularly bad, they are not changeable.  

With your extra secret, your search space is not very big so you may not be adding a lot of
security for the determined cracker, but it certainly makes you more secure (if even only
minorly) than the other guy, but at what cost?  For example, is your machine now less
accessible to you?  Perhaps you may at some point be behind a firewall that does not allow you
to access random ports, this could hurt you.  A value decision that only you personally can
make.


(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds