26 ms·
Meh why are you worried about security? They aren’t.
by rdtwo 4y ago
Meh why are you worried about security? They aren’t.
- ncmncm 4y agoGood point. You can never be more secure than your IT crew. Unless you treat the LAN as hostile, which you totally should.
- aitchnyu 4y agoHow should I start treating my lan as hostile?
- ncmncm 4y agoFirst, turn off password and root ssh logins to your machine. Treat all the other machines on the LAN as if they have already been suborned. Don't 'ssh -A' to them if it would enable them to log back into your machine. No 'ssh -X' either except from within a VM on your machine, with its own X-in-a-window. I.e., pretend every other machine is out on the open internet. There are new ssh options to keep closer control of credentials.