Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If there is a 0-day or unreleased SSH vulnerability, your login security doesn't matter. In those cases, it helps if the s'kiddies skipped your site altogether because they couldn't be bothered to wait to find where your ssh port is.


Ah, thanks. That's a big if, but it has happened, so it makes some sense.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: