3 ms·

It doesn't matter if ssh access is permitted.

• mirimir 8y ago
  So how is an attacker going to access the machine?
  • tjoff 8y ago
    If a certain account is present then the attacker might know a certain service is running and then target that. Might also reveal the purpose of the machine (oh, this is probably the build server) or who is managing it.
    • mirimir 8y ago
      Nothing crucial should be directly accessible from the Internet.
      • tjoff 8y ago
        Indirectly then, or, the publicly facing servers are crucial enough. It is information leakage, not the end of the world but it can potentially be helpful for an attacker.