News for hackers. Stuff that matters.

A comment on A Linux botnet is launching crippling DDoS attacks in excess of 150Gbps. Parent comment

Re:A Linux botnet is launching crippling DDoS attacks in exc... by bkor on Wednesday September 30, 2015 @04:24AM (#10302506)
From openssh 7.0 release notes:

  * PermitRootLogin=without-password/prohibit-password now bans all
    interactive authentication methods, allowing only public-key,
    hostbased and GSSAPI authentication (previously it permitted
    keyboard-interactive and password-less authentication if those
    were enabled).
It mentions that previously without-password it would still allow keyboard-interactive logins. Should be fairly easy to fake for a botnet!
[ Parent | on HN ]
Re:A Linux botnet is launching crippling DDoS attacks in exc... by mirimir on Wednesday September 30, 2015 @04:32AM (#10302527)
I still prefer "PermitRootLogin=no".
[ Parent | on HN ]