News for hackers. Stuff that matters.

A comment on Obscurity Is a Valid Security Layer. Parent comment

Re:Obscurity Is a Valid Security Layer by pixl97 on Tuesday October 18, 2016 @06:44PM (#12739388)
>I'd argue that port-knocking, SPA, and changing the port are not cost-effective.

Changing ports is very effective, at least at reducing noise. This is especially true when setting up a new service with no preexisting clients. Default port 22 is an ocean of noise and constant password attempts, no reason to fill up my log servers with millions and millions of attempts per year.

[ Parent | on HN ]
Re:Obscurity Is a Valid Security Layer by Tinned_Tuna on Wednesday October 19, 2016 @02:40AM (#12741602)
fail2ban and similar tools are standard, widely used, quick to configure, and very effective at removing noise. You won't need to hassle to configuration of any new or existing clients, vulnerability scanners, etc.
[ Parent | on HN ]