SSH Brute Force – The 10 Year Old Attack That Still Persists

Re:SSH Brute Force – The 10 Year Old Attack That Still Persists by mikegioia on Monday July 15, 2013 @01:18PM (#6046981)

I don't understand how OpenVPN/PKI is any better than running SSH externally on a different port and strictly using key based auth.

[ Parent | on HN ]

Re:SSH Brute Force – The 10 Year Old Attack That Still Persists by pbsdp on Monday July 15, 2013 @01:25PM (#6047043)

OpenVPN:

- Exposes less code to attack

- Can be run on a single machine, distinct from your production systems, where compromise will only result in a compromise of VPN communications, not of an actual production machine on which your production data/processes exist.

[ Parent | on HN ]

Re:SSH Brute Force – The 10 Year Old Attack That Still Persists by stock_toaster on Monday July 15, 2013 @03:15PM (#6047912)

A few people use spiped[1] in similar fashion.

[1]: http://www.daemonology.net/blog/2012-08-30-protecting-sshd-u...

[ Parent | on HN ]

Re:SSH Brute Force – The 10 Year Old Attack That Still Persists by lutorm on Monday July 15, 2013 @03:50PM (#6048128)

Can't you just run an ssh gateway and accomplish the last goal, though?

[ Parent | on HN ]