Re:Linux Hardening Guide
by lathiat on Thursday December 31, 2020 @02:32AM
(#25590462)
This is a good theory and I mostly agree but if you disallow password logins, private keys on servers and agent forwarding - how do you copy things server to server without going through your slow and possibly remote local connection?
[ Parent
| on HN ]
Magic wormhole and friends are pretty good at doing this securely, especially between servers that can talk to each other without relays.
See also croc
python3 -m http.server —bind 0.0.0.0 8080 is my favorite command
Re:Linux Hardening Guide
by yjftsjthsd-h on Thursday December 31, 2020 @03:00PM
(#25596469)
If we're talking about security, then exposing your files to anything with network access to your server sounds like a terrible, terrible idea.
I 100% endorse this method of securely moving files way way way above using things like agent forwarding and throwing keys on servers.
It's shocking to me how people overlook HTTP as a tool for passing files around.