3 ms·
I don't agree with the people in the article comments claiming a change of port number is worthless security-by-obscurity. It has completely eliminated random "
by 0x0 14y ago
I don't agree with the people in the article comments claiming a change of port number is worthless security-by-obscurity. It has completely eliminated random "drive-by" login attempts on my servers, and I'm sure that can only be a good thing - both for staying out of any database of hosts with versioned SSH servers (or distribution names, even) (in case a 0day exploit comes out, either for SSH or for the distro's equivalent Apache), and for reducing exposure in case an account with an easily guessable password is accidently configured, at the least.
Additional configuration complexity is pretty much a non-issue. One extra "Port" line in ~/.ssh/config or the equivalent UI textfield box in putty.