3 ms·

In the same way that passwords, private keys, and safe combinations are security by obscurity, sure.

• lucb1e 5y ago
  Except that passwords, private keys, and safe combinations cannot be guessed in 0.1 seconds the way that a port can (65k possible values and a SYN packet really isn't large). There is a line to be drawn between high-entropy secrets and using an unpredictable port number.
  • Godel_unicode 5y ago
    Where are people getting the idea that "listening address" means port number? The title of the page literally says IP address...
    • lucb1e 5y ago
      Ah, misunderstanding on my part. For what it's worth, it doesn't say IP address, just listening address which I just took as whatever place (IP,port tuple) it listens on, and unless one has a huge IP range (uncommon with typical setups) I can see how "people" take that to mean port changing by default if they, like me, don't read carefully enough.
      • Godel_unicode 5y ago
        Huge ranges of IPv6 addresses are extremely common, virtually no ISP can be bothered to allocate smaller blocks than a /64. The minimum allocation of addresses recommended is a /32, which is 65k addresses. You also know they don't mean port numbers because there's no such thing as a 6-digit port number. From tfa: """Imagine your SSH server only listens on an IPv6 address, and where the last 6 digits are changing every 30 seconds"""