News for hackers. Stuff that matters.

A comment on Docker containers should not run an SSH server. Parent comment

Re:Docker containers should not run an SSH server by ewindisch on Thursday June 26, 2014 @03:12PM (#7951125)
To this point, one of the RFC documents for SSH explicitly calls out the fact that the protocol is vulnerable to denial of service attacks and suggest only allowing access from the IP addresses of known users.

Source: http://tools.ietf.org/html/rfc4251#section-9.3.5

[ Parent | on HN ]
Re:Docker containers should not run an SSH server by vidarh on Thursday June 26, 2014 @08:33PM (#7952241)
It's not just that the protocol is vulnerable. With e.g. openssh you can not just deny access to the ssh service, you can max out CPU on the entire machine if you hammer it enough.
[ Parent | on HN ]