News for hackers. Stuff that matters.

A comment on Mozilla Guidelines to Secure SSH. Parent comment

Re:Mozilla Guidelines to Secure SSH by igetspam on Tuesday November 09, 2021 @06:37AM (#29160312)
CIS workbenches are updated regularly. You have to sign up for an account, which is free, to get access.
[ Parent | on HN ]
Re:Mozilla Guidelines to Secure SSH by bravetraveler on Tuesday November 09, 2021 @06:04PM (#29168778)
Just keep in mind that some of the recommendations could've been dropped 20 to 30 years ago.

I don't disagree, they make some good suggestions - but take TCPWrappers for example. CIS will suggest you use it.

That predates firewalls, and requires applications be built/linked against the library.

These days, not worth the time/effort. Do the default-drop policy they suggest, and carry on!

[ Parent | on HN ]