Ubuntu server remote file access

Kent Borg kentborg at borg.org
Fri Sep 27 13:58:17 UTC 2013


On 09/27/2013 09:48 AM, compdoc wrote:
> And having port 22 open invites the world to attempt breaking into 
> your server by trying to guess passwords.

If you don't reuse passwords between your ssh account and other 
accounts, and if you have a good password, this should not be a 
problem.  The sshd will limit how fast attackers can make attempts. 
(Your ATM PIN is only 4-digits, but because the ATM limits tries, it is 
secure.)

I look at my logs and see attackers spending hundreds of attempts to try 
to break my root password, and I chuckle: First, because root doesn't 
have a login password, Second, if it did the password would be of 
sufficient that it would take billions of attempts to have a 50-50 
chance of getting in.

However, nearly everyone *does* reuse just a few passwords across 
multiple sites, which is doomed.  Don't do that!  But you will...

-kb





More information about the ubuntu-users mailing list