3 ms·
no idea how to get notifications for responses to my comments, sorry. No, I am mostly implying that the name alone is a risk. If you've ever brought up a box o
by jamiesonbecker 13y ago
no idea how to get notifications for responses to my comments, sorry.
No, I am mostly implying that the name alone is a risk. If you've ever brought up a box on the net, you know that the first account that's attacked is root. While the above moon/andromeda analogy is apt, some types of vulns could also leave you open as well with a known username to login with. Better to block those outright.
Plus, there's no reason to log in as root anyway as a simple matter of best practices; it's against virtually every security standard; no auditing of privileged access and hopefully no root account sharing!
heavy opinion: logging into a remote machine as root on modern Linux/UNIX is just laziness.