3 ms·
I once had a box "bot-netted" by some automatic scanner after I set up postgres on it, being in a hurry after another box crashed unexpectedly. It is stunningly
by stiff 12y ago
I once had a box "bot-netted" by some automatic scanner after I set up postgres on it, being in a hurry after another box crashed unexpectedly. It is stunningly idiotic to me that SSH seems to be enabled by default for all users (at least on Ubuntu server).
- zaroth 12y agoAll users with a password set. So 'setting the password' has perhaps an unclear side effect. I guess if you disable password logins, someone would need to get a pubkey into a user's ~/.ssh directory.
- tankenmate 12y agoOr more importantly, once in they insert a public key in there so if you naively disable password access they'll still be able to get back in. Change the password AND remove any keys in ~/.ssh. Also a debsums or rpm -qV is a good idea. A complete re-install is my preferred method though.