News for hackers. Stuff that matters.
Re:Ask HN: How do you continuously monitor web logs for hack... by danieltillett on Wednesday May 09, 2018 @09:00PM (#17035682)
This is what I would like to know. If strong ssh passwords can be broken then there is a bigger issue than just turn off ssh password log in.
Re:Ask HN: How do you continuously monitor web logs for hack... by sunstone on Saturday May 12, 2018 @04:02AM (#17052993)
I am pretty sure that 16 character random passwords are safe from dictionary attacks, and I suspect you and I are using the same process for protecting these passwords. tptacek is leary of our process while you and I are leary of the certs getting out of our control without our knowledge. Security is a handful of trade offs.