A Linux botnet is launching crippling DDoS attacks in excess of 150Gbps

Re:A Linux botnet is launching crippling DDoS attacks in exc... by Tobu on Wednesday September 30, 2015 @03:17AM (#10302290)

`PermitRootLogin = without-password` in /etc/ssh/sshd_config

Same thing for non-root: `AuthenticationMethods = publickey`

And when buying a router, buy something that will get regular security updates, or where you can put OpenWRT.

[ Parent | on HN ]

Re:A Linux botnet is launching crippling DDoS attacks in exc... by bkor on Wednesday September 30, 2015 @04:24AM (#10302506)

From openssh 7.0 release notes:

  * PermitRootLogin=without-password/prohibit-password now bans all
    interactive authentication methods, allowing only public-key,
    hostbased and GSSAPI authentication (previously it permitted
    keyboard-interactive and password-less authentication if those
    were enabled).

It mentions that previously without-password it would still allow keyboard-interactive logins. Should be fairly easy to fake for a botnet!

[ Parent | on HN ]

Re:A Linux botnet is launching crippling DDoS attacks in exc... by mirimir on Wednesday September 30, 2015 @04:32AM (#10302527)

I still prefer "PermitRootLogin=no".

[ Parent | on HN ]

Re:A Linux botnet is launching crippling DDoS attacks in exc... by ATsch on Wednesday September 30, 2015 @09:33AM (#10303778)

However unrealistic it is, I still wish that open source Projects would agree on what to call things.

The /etc/sudoers NOPASSWD and sshd without-password sound like the same thing, but are far from that.

I feel like they could have named it better.

[ Parent | on HN ]

Re:A Linux botnet is launching crippling DDoS attacks in exc... by eikenberry on Wednesday September 30, 2015 @12:12PM (#10304972)

Sudoers NOPASSWD means you don't have to type the password for that feature. Sshd without-password means passwords are disabled. Not the same thing.

[ Parent | on HN ]