News for hackers. Stuff that matters.
Re:SSH hacks – a little sanity for remote workers by Piskvorrr on Thursday April 30, 2020 @05:19AM (#23028975)
My guess is that it stems from lax firewall defaults. "Allow port 53 - [tcp/udp/BOTH]?" (Yeah, I know that DNS can also work over 53/tcp, but it's rare compared to the 53/udp volume)
Re:SSH hacks – a little sanity for remote workers by acdha on Thursday April 30, 2020 @02:41PM (#23034470)
It's not as rare as it used to be a couple decades ago. If you block tcp/53 you will find a surprising number of things breaking as record sizes have increased over the years.