3 ms·
After one of my AWS accounts (with 2fa and an email I basically never used) was compromised I'm incredibly careful to expose services like this onto the public
by elintknower 3y ago
After one of my AWS accounts (with 2fa and an email I basically never used) was compromised I'm incredibly careful to expose services like this onto the public internet. What steps did you take to ensure the pipeline of your app to server endpoints was secure and in theory not vulnerable to someone traulling open ssh ports etc?
- pmdfgy 3y agoOuch, I'm sorry to hear that. What do you mean by "traulling open ssh ports" ?
- lsowen 3y agoI think they likely meant "trawling": https://en.m.wikipedia.org/wiki/Trawling https://en.m.wikipedia.org/wiki/Trawling. (ie casting a net and "fishing" for open ssh)
- gwynplaine 3y agoYou could put it behind a Wireguard VPN. That way you aren't exposing SSH or the like directly on the internet. Properly-configured SSH with public key authentication is not something I worry about though.