A counterpoint to the "they run Windows" sentiment here: I accidentally left Xvnc open with no password while doing "a quick thing" on my VPS. Presumably an au

A counterpoint to the "they run Windows" sentiment here: I accidentally left Xvnc open with no password while doing "a quick thing" on my VPS. Presumably an automated scan eventually found it (after a few weeks or so). IIUC, someone manually logged in to start a crypto miner on it. Moral of story: "a quick thing" needs to mean "15 minutes or less", or a scenario where I'm constantly connected. (And as an aside, the hunt continues for a decent VNC app for Android that combines the usability of RealVNC with compatibility with host-based TLS auth... I _would_ like to permanently stop worrying about passwords...)