3 ms·
You left root login enabled and kept passwords on. And you're upset you got compromised? You can also enable keys in the control panel and you won't have to dea
by namidark 14y ago
You left root login enabled and kept passwords on. And you're upset you got compromised? You can also enable keys in the control panel and you won't have to deal with passwords being emailed.
Those are the first few things you should be checking when setting up a new server (disable password logins and only allow keys).
- goodwink 14y agoI'm not upset I got compromised, it was very likely given my configuration, I acknowledge that. I did have keys enabled so the password wasn't email initially, it was only emailed as a result of a root password reset. The article is about what the compromise means about DigitalOcean not about my one box.