mozz to Technology@lemmy.ml • 6 months agoLinux devices are under attack by a never-before-seen wormarstechnica.comexternal-linkmessage-square20fedilinkarrow-up1134arrow-down116file-text
arrow-up1118arrow-down1external-linkLinux devices are under attack by a never-before-seen wormarstechnica.commozz to Technology@lemmy.ml • 6 months agomessage-square20fedilinkfile-text
minus-squareKairoslink28•6 months ago the NoaBot targets weak passwords connecting SSH connections. Harden your configs people. AllowUsers is a really goood one.
minus-square𝓢𝓮𝓮𝓙𝓪𝔂𝓔𝓶𝓶linkfedilink2•6 months agoIf we’re going to play that game. Require an Ed25519 key with a strong password.
minus-squaremozzOPlinkfedilink1•6 months ago (In this case the “wrench” is just breaking into some weak link that isn’t ssh, once your password is strong to not be a weak link)
minus-square@sugar_in_your_tea@sh.itjust.workslinkfedilink1•6 months agoAlso install something like fail2ban to prevent brute force attacks.
Harden your configs people.
AllowUsers is a really goood one.
Or just don’t allow password auth at all.
Or just have a good password
If we’re going to play that game. Require an Ed25519 key with a strong password.
Or ed25519-sk.
(In this case the “wrench” is just breaking into some weak link that isn’t ssh, once your password is strong to not be a weak link)
Also install something like fail2ban to prevent brute force attacks.