3 ms·

This is fine, though. "Security through obscurity is not security" but moving your SSH port to something not 22 will utterly eliminate brute force attacks. It'

• wkat4242 3y ago
  That's still not really security but just a nuisance mitigation IMO :)
  • Gordonjcp 3y ago
    It's both, really. If you're not getting scanned, you've reduced an attack surface, and that can only be good.
    • wkat4242 3y ago
      Well, I view it as hiding an attack surface. It's still there, just harder to find. But I know I'm a bit of an absolutist on security.
      • Gordonjcp 3y ago
        You put a lock on your bike. But you also put it in the shed, and lock the shed.
  • jlund-molfese 3y ago
    Nuisance mitigations are part of security too! Fewer irrelevant notifications makes it more likely you’ll notice when something really is a problem. It’s like how an adversary might launch a DDoS attack at the same time as they exploit a SQL injection vulnerability to exfiltrate credit card information. Filling up logs and alerts overwhelms the blue team and makes it harder to notice the quieter, but more dangerous attack.
  • oh_sigh 3y ago
    Security through obscurity actually is security, and is perfectly valid to use with a defense in depth strategy. The problem is when obscurity is the only defense.
    • bigkm 3y ago
      I agree, these attacks are looking for systems that have pretty default security, and by running on a different port you avoid all this automated chaos because you're non default now. Like scam emails with typos, a way to filter out the naïve people.
  • 01712934368 3y ago
    [flagged]
    • 01712934368 3y ago
      [flagged]