News for hackers. Stuff that matters.

A comment on Patch to Log SSH Passwords – One Year Results. Parent comment

Re:Patch to Log SSH Passwords – One Year Results by trashcan on Thursday November 20, 2014 @02:15AM (#8634693)
http://www.cvedetails.com/vulnerability-list/vendor_id-5567/...

Probably best to just whitelist SSH to known IPs.

[ Parent | on HN ]
Re:Patch to Log SSH Passwords – One Year Results by colinbartlett on Thursday November 20, 2014 @02:20AM (#8634700)
Curious what you are pointing out here? Just the number? 8 security vilnerabities? What's the count at which I am supposed to stop using a product?
[ Parent | on HN ]
Re:Patch to Log SSH Passwords – One Year Results by jlgaddis on Thursday November 20, 2014 @03:30AM (#8634826)
I assume that he's pointing out that even better than running something like fail2ban (or "pf", where available) is not allowing SSH connections from 0/0.
[ Parent | on HN ]