4 ms·
Honestly, I don't worry about that at all. I had a machine compromised in 2001 by script kiddies and worms scanning the internet on port 22 and compromising an
by justinsaccount 10y ago
Honestly, I don't worry about that at all.
I had a machine compromised in 2001 by script kiddies and worms scanning the internet on port 22 and compromising any host they could find with CVE-2001-0144. Not by attackers hijacking TCP connections.
In 2016 I am worried about a 0day being released and scripts kiddies or a worm compromising every host they can find running sshd. This effectively happened to debian systems in 2008. I don't know how you can say that it doesn't make sense when it happened.
- tptacek 10y agoI just don't understand the threat model that gives attackers the most valuable RCE vulnerability in a decade, but denies them an ability attackers have had since 1996.
- threatmodelderp 10y agoThreat MODEL. Real life is different from models. He just shared a real life experience that defied your model. Also your advice to put spiped in front of SSH is awful. Now you need to manage two keys, instead of just one. Sometimes you sound like a cperciva shill.