News for hackers. Stuff that matters.

A comment on Learn from your attackers – SSH HoneyPot. Parent comment

Re:Learn from your attackers – SSH HoneyPot by jlgaddis on Tuesday September 19, 2017 @07:36PM (#15289658)
> ... will insist using garbage passwords if not prevented from doing so ...

  /etc/security/pwquality.conf
is how I prevent co-workers from doing so (on RHEL and derivatives).
[ Parent | on HN ]
Re:Learn from your attackers – SSH HoneyPot by tokenizerrr on Tuesday September 19, 2017 @07:45PM (#15289682)
Good to know. We do our user provisioning through an internal portal which enforces everything. The ssh servers als gets configured to disable password login so the only thing passwords are used for is sudo. All web stuff is behind a SSO gateway with password+2fa.
[ Parent | on HN ]