News for hackers. Stuff that matters.

A comment on List of Unix binaries that can be used to bypass local security restrictions. Parent comment

Re:List of Unix binaries that can be used to bypass local se... by TacticalCoder on Friday July 07, 2023 @12:47PM (#36634491)
> The best practice is not to allow passwords for root login.

My sshd is configured to not allow passwords logins at all: it's U2F/Yubikey only.

[ Parent | on HN ]
Re:List of Unix binaries that can be used to bypass local se... by gsich on Friday July 07, 2023 @05:09PM (#36638328)
I somewhat like smartcards more. Takes use of the slot, not wasting rare USB ports on notebooks. I don't why there are so few USB ports, but that's another discussion.
[ Parent | on HN ]