News for hackers. Stuff that matters.

A comment on What You Get After Running an SSH Honeypot for 30 Days. Parent comment

Re:What You Get After Running an SSH Honeypot for 30 Days by SahAssar on Sunday June 16, 2024 @01:41PM (#40698767)
If your server is on the internet with a public ssh server then it is probably providing some sort of internet service. That internet service is almost always easier to DoS than your openSSH server. If you are not providing a internet service then why is your SSH open to the internet?
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by jszymborski on Sunday June 16, 2024 @04:12PM (#40699747)
Maybe the service is provided over SSH via e.g. port-forwarding (or is simply "SSH access to a server").
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by SahAssar on Sunday June 16, 2024 @04:59PM (#40700068)
Sure, but are L7 attacks easier than L4 against those servers? Adding more layers/software has a cost in configuration, maintenance, attack-surface, etc.
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by kloop on Sunday June 16, 2024 @02:45PM (#40699147)
> If you are not providing a internet service then why is your SSH open to the internet?

So that I can ssh into it from various places and do stuff on my home server from elsewhere

[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by SahAssar on Sunday June 16, 2024 @03:12PM (#40699334)
So you are accessing that server's services from some network, why are you not only allowing SSH over that network?

Or, if your service is open to the internet then why does not what I said above hold true?

[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by kloop on Sunday June 16, 2024 @06:27PM (#40700647)
I guess I am technically, but only for myself
[ Parent | on HN ]
Re:What You Get After Running an SSH Honeypot for 30 Days by SahAssar on Sunday June 16, 2024 @06:38PM (#40700694)
What is the networking difference between a service for yourself that you want to access from "various places" and a public service with auth checks for your key?
[ Parent | on HN ]