News for hackers. Stuff that matters.

A comment on M1 dev setup with a virtual Linux box. Parent comment

Re:M1 dev setup with a virtual Linux box by mcny on Sunday April 11, 2021 @09:46AM (#26770345)
I think the reason they mentioned more complicated setups is because I'm using an actual old machine at home and unless you know what you're doing you don't want to expose it to the world.

I think poking a hole on port 22 is mostly ok if you only allow key authentication and no password authentication but I don't know enough to give advice on security.

[ Parent | on HN ]
Re:M1 dev setup with a virtual Linux box by rovr138 on Sunday April 11, 2021 @02:43PM (#26772461)
Just posting alternatives.

I use a VPS with SSH. I have to ssh in, then I can ssh into the machine at home.

For safety, key authentication and fail2ban would cover a lot. I mainly have the 1 port.

If I need to expose another SSH port to the internet, I can do it, but yes, it would need extra protection since logs are coming from the machine ssh'ing in.

[ Parent | on HN ]
Re:M1 dev setup with a virtual Linux box by hiq on Sunday April 11, 2021 @04:34PM (#26773156)
> For safety, key authentication and fail2ban would cover a lot. I mainly have the 1 port.

Changing the port from the default 22 to something else is also recommended, if only because it makes fail2ban logs way less verbose.

[ Parent | on HN ]