News for hackers. Stuff that matters.

A comment on Who's Attacking My Server?. Parent comment

Re:Who's Attacking My Server? by Topolomancer on Sunday March 13, 2022 @12:47PM (#30663034)
That's an excellent point. I painted myself into a corner here because I am letting some of my friends use the server as well. Have to gently transition them to public key usage only now.
[ Parent | on HN ]
Re:Who's Attacking My Server? by namibj on Sunday March 13, 2022 @11:04PM (#30668113)
Give them a reasonable deadline, and just disable password login afterwards.

This isn't something they should have trouble understanding/accepting.

[ Parent | on HN ]
Re:Who's Attacking My Server? by bombcar on Sunday March 13, 2022 @03:03PM (#30664628)
You can restrict password auth to particular users/groups, which also greatly reduces the attack vector.
[ Parent | on HN ]
Re:Who's Attacking My Server? by Filligree on Sunday March 13, 2022 @08:40PM (#30667297)
Or require OTP for password authentication.
[ Parent | on HN ]