Brute-Force SSH Server Attacks Surge (InformationWeek) [LWN.net]

Brute-Force SSH Server Attacks Surge (InformationWeek)

Posted May 15, 2008 4:34 UTC (Thu) by bronson (subscriber, #4806)
In reply to: Brute-Force SSH Server Attacks Surge (InformationWeek) by tialaramex
Parent article: Brute-Force SSH Server Attacks Surge (InformationWeek)

> There's no reason it needs to be so dangerous that you'd want to disable it.

Sure there is.  A closed port is infinitely more safe than a listening port.

Well, maybe not infinitely.  But it's a huge number.  The difference is so big that running
listening servers that the user isn't actually using is downright irresponsible.

> If you don't have root logins, and you require a key for access ... you can make SSH an
uninteresting target.

Not if you were running Debian or Ubuntu.  :(

The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:

Note: you can avoid this step in the future by logging into your LWN account.