Re:Ask HN: How do you continuously monitor web logs for hack...
by sunstone on Wednesday May 09, 2018 @04:03AM
(#17028129)
So for example, a 16 character random password is still vulnerable?
[ Parent
| on HN ]
Re:Ask HN: How do you continuously monitor web logs for hack...
by danieltillett on Wednesday May 09, 2018 @09:00PM
(#17035682)
This is what I would like to know. If strong ssh passwords can be broken then there is a bigger issue than just turn off ssh password log in.
Re:Ask HN: How do you continuously monitor web logs for hack...
by sunstone on Saturday May 12, 2018 @04:02AM
(#17052993)
I am pretty sure that 16 character random passwords are safe from dictionary attacks, and I suspect you and I are using the same process for protecting these passwords. tptacek is leary of our process while you and I are leary of the certs getting out of our control without our knowledge. Security is a handful of trade offs.