Hacker News new | past | comments | ask | show | jobs | submit login

They do, don't they? Later down there is a section Enforce ssh key logins. However that makes activating the root account even stranger.

The thing with the ssh key passphrase makes not much sense to me. I think this is just about "keep your private key save". On linux, passwords like this (like gpg) get cached by the usual password input clients.

You are right about watching the successful logins first. He writes it is to raise awareness.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: