News for hackers. Stuff that matters.

A comment on Moving your SSH port isn’t security by obscurity. Parent comment

Re:Moving your SSH port isn’t security by obscurity by jjoonathan on Monday September 21, 2020 @05:28PM (#24548682)
Log filtering at the expense of having one more thing to manage, forget, or otherwise screw-up.

Ways I've seen this go wrong:

- someone fails to copy the port while communicating it

- the new whiz-bang AI security solution detects non-standard SSH ports and "quarantines" you while you try to figure out what happened and who to talk to

- someone manually "reviews" the firewall rules and locks you out of your own boxes

- someone builds a tool that uses SSH but doesn't allow non-standard ports

[ Parent | on HN ]
Re:Moving your SSH port isn’t security by obscurity by a1369209993 on Monday September 21, 2020 @06:01PM (#24548938)
> the new whiz-bang AI security solution

> someone manually "reviews" the firewall rules

This is a feature. Allowing Unfriendly AIs or incompetent morons to dictate security policy will go horribly wrong eventually; nonstandard SSH ports help make it painful for you to allow them to gain a foothold in the first place.

[ Parent | on HN ]
Re:Moving your SSH port isn’t security by obscurity by jjoonathan on Tuesday September 22, 2020 @09:08AM (#24553975)
Turning incompetence into actual problems is not a value-add. I already know the incompetence exists, so there's no informational value, and if I were in a position to do something about it, I would have, so there's no organizational value. Just wasted time.
[ Parent | on HN ]