3 ms·
The real problem with obscurity as a security layer is that it complicates day to day work that you'd be doing with that system. Each new person needs to be con
by diziet 10y ago
The real problem with obscurity as a security layer is that it complicates day to day work that you'd be doing with that system. Each new person needs to be constantly trained and reminded about your specific system quicks and configuration outside the standard norm before they can do work using the system. That has a real cost, and it is a cost analysis question.
- jlg23 10y agoThat really depends on the use case. We too have sshd listening on a non-standard port and the overhead to tell people what to put into their .ssh/config is negligible. We use SPA only on very few select servers that less people need to access and those just get the shell script they need to run instead of typing "ssh $host". After about 2 years of running things this way: The time saved in checking system logs in a single week was much more than the time spent on "training" people in those 2 years.