Kids, this is story of How I Met... my VPS hacked

Re:Kids, this is story of How I Met... my VPS hacked by ufmace on Monday January 20, 2014 @02:44PM (#7091399)

I agree, and I've always thought that the people opposed to it are getting the 'security by obscurity' thing all wrong and taking it to ridiculous levels. Denying information to your attacker is virtually always a good idea. The only exception is widely-used, core stuff like encryption algorithms, web browsers, server framework, etc.

So sure, change the port and all, just as long as you're aware of what it does and doesn't do. I don't think anyone believes that you can allow root login with a password of 12345 if only you change the port, but it can be a good layer in a well-designed system.

[ Parent | on HN ]

Re:Kids, this is story of How I Met... my VPS hacked by rlwolfcastle on Tuesday January 21, 2014 @04:49AM (#7094305)

The port change is a cosmetic difference that does not alter the security of your box one iota. All it currently does is reduce the number of unauthorized attempted logins.

If your box is more vulnerable on port 22 than port 22221 then your problems run orders of magnitude deeper than which port your ssh server runs on.

[ Parent | on HN ]