I actually looked into this a few months ago and if memory serves, the last default setup authentication bypass was in something like 2003. Since then, I think

I actually looked into this a few months ago and if memory serves, the last default setup authentication bypass was in something like 2003. Since then, I think the worst thing has been user enumeration. And 2003 was a very different world in terms of how much we cared about hardening, so ssh being reliable throughout all that time is really quite something.