3 ms·

SSH is no better than some random Windows-based remote admin tool if the same default password is used.

• hyperion2010 12y ago
  Ah yes of course, and the portion that I quoted didn't include this tidbit which I guess is what I was actually thinking about: “What the investigators we’ve worked with so far have been able to gather is that [the thieves] were exploiting not the pcAnywhere credentials, but a flaw in old versions of pcAnywhere,” Then again old versions of SSH are probably equally vulnerable. It would seem that there is no substitute for having a real root who has responsibility for the system, though perhaps the comment from nuxi7 is a simple way to engineer around part of the problem. Sane defaults or in this case an explicit lack of defaults could be useful.
• wglb 12y ago
  Well, it is better, since SSH doesn't come with a default password, and you can disable the use of passwords in SSHD.