News for hackers. Stuff that matters.

A comment on Moving your SSH port isn’t security by obscurity. Parent comment

Re:Moving your SSH port isn’t security by obscurity by jjav on Monday September 21, 2020 @05:40PM (#24548786)
> If someone using SSH ignores the fact that the host key has changed

Then it's game over regardless of anything else. That someone is now owned by anything and anyone who cares to MITM them.

[ Parent | on HN ]
Re:Moving your SSH port isn’t security by obscurity by cthalupa on Tuesday September 22, 2020 @12:29AM (#24550855)
Yes, it is an issue for sure.

But it's also a world where people have grown accustomed to doing this - automatic scaling in the cloud with re-use of IPs means that systems come up with the same IP frequently, so people have gotten used to doing this.

For the stuff I manage in the cloud I use their APIs to keep my known_hosts file up to date - if an IP got reused by an instance, I clear the entry in my known_hosts file. If it didn't, I would see the key change alert (verified by modifying the host key on the destination server)

[ Parent | on HN ]