3 ms·
At this point, 16 bits of entropy is more than the entropy of a lot of the passwords that I've seen.
by MertsA 11y ago
At this point, 16 bits of entropy is more than the entropy of a lot of the passwords that I've seen.
- richardwhiuk 11y agoYou have 10 bits of entropy at best, unless you put it above 1024, at which point if it dies, any none privileged user on the box can sniff passwords.
- arielb1 11y agoIf you are serious, you should limit SSH access to a bastion host with no unprivileged users.
- Dylan16807 11y agoWhy are you using passwords for SSH? Do you actually have untrusted users on the box? Why would you not secure the custom port to root-only?