Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.misc > #12293
| From | Rich <rich@example.invalid> |
|---|---|
| Newsgroups | comp.os.linux.misc |
| Subject | Re: fedora 20 disabling ssh by default |
| Date | 2014-10-11 22:34 +0000 |
| Organization | My Linux Box |
| Message-ID | <m1cbaa$ftn$1@dont-email.me> (permalink) |
| References | (5 earlier) <m18un5$la4$4@dont-email.me> <m19s3t$148$1@speranza.aioe.org> <slrnm3h6qq.960.spamtrap42@one.localnet> <m1bnsj$eut$2@dont-email.me> <m1btfj$hu9$1@speranza.aioe.org> |
Bill Cunningham <nospam@nspam.invalid> wrote: > "William Unruh" <unruh@invalid.ca> wrote in message > news:m1bnsj$eut$2@dont-email.me... > > On 2014-10-11, Robert Riches <spamtrap42@jacob21819.net> wrote: > >> On 2014-10-11, Bill Cunningham <nospam@nspam.invalid> wrote: > >>> > >>> "William Unruh" <unruh@invalid.ca> wrote in message > >>> news:m18un5$la4$4@dont-email.me... > >>>> On 2014-10-10, Bit Twister <BitTwister@mouse-potato.com> wrote: > >>>>> On Fri, 10 Oct 2014 08:50:32 +0000 (UTC), Rich wrote: > >>>>>> > >>>>>> That is most likely a brute force password attempt. If you shutdown > >>>>>> ssh, you'll block the attempts, but also prevent yourself from > >>>>>> logging > >>>>>> in via ssh. So if you log in via ssh, you'll end up shutting > >>>>>> yourself > >>>>>> out as well. > >>>>> > >>>>> Just tell your firewall what ip addresses are allowed to connect to > >>>>> sshd. > >>>>> Tell sshd that root is not allowed to use a password login. > >>>>> Tell sshd to listen on a different port. > >>>>> > >>>>> > >>>>>> However, if your password is properly random, you have little to > >>>>>> worry > >>>>>> about other than extra entries in your log files. > >>>>> > >>>>> Random passwords are easier to crack. Use a funky phrase like > >>>>> my dog eats concrete. > >>>>> Feel free to sprinkle in numbers and !@#$%^&*()_+= characters. > >>>> > >>>> He did say "properly random". I am sure by properly he did not mean 4 > >>>> random characters. A long enough password with random characters is > >>>> certainly better than your example which really is not terribly random. > >>> > >>> Something generated by uuid would I think be pretty good. Or better > >>> yet > >>> if you could direct something from dev/urandom as text; but I don't know > >>> if > >>> you could do that. > >>> > >>> Bill > >> > >> This works for me: > >> > >> head -c 16 /dev/random | base64 > >> > >> That gives about 24 characters, including a couple of symbols. > >> For website passwords, I prefer to copy-paste the password into > >> the browser, so take a few over a dozen alphanumeric characters > >> from the above command. In theory, /dev/random could block, but > >> even if it does, I could just spin the trackball mouse for a few > >> seconds. > > > > So why do you not use /dev/urandom? Using /dev/random is silly. > I think there would be more entropy in urandom. The "entropy" is the same for both. The difference is random blocks when the entropy drops to a low water mark, and urandom just continues to provide randomness: http://www.2uo.de/myths-about-urandom/
Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 19:23 -0400
Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-09 23:35 +0000
Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-09 20:25 -0400
Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 01:11 +0000
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:32 +0000
Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-10 17:59 -0400
Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 23:13 -0400
Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 08:50 +0000
Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 09:10 +0000
Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 10:16 +0100
Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:05 -0400
Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-11 07:47 +0100
Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 09:26 +0000
Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 11:00 +0100
Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 10:14 +0000
Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 10:29 +0000
Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 16:27 -0400
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:41 +0000
Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:03 -0400
Re: fedora 20 disabling ssh by default John Hasler <jhasler@newsguy.com> - 2014-10-10 20:28 -0500
Re: fedora 20 disabling ssh by default Robert Riches <spamtrap42@jacob21819.net> - 2014-10-11 02:52 +0000
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:03 +0000
Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-11 14:38 -0400
Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 18:05 -0400
Re: fedora 20 disabling ssh by default Richard Kettlewell <rjk@greenend.org.uk> - 2014-10-11 23:18 +0100
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 23:43 +0000
Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 22:34 +0000
Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 19:13 -0400
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 00:30 +0000
Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 21:27 -0400
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 02:14 +0000
Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 03:59 +0000
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:34 +0000
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:31 +0000
Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-10 16:06 -0400
Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:00 -0400
Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:02 +0000
Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-11 16:35 -0400
Re: fedora 20 disabling ssh by default HakTar <FiteWinTel@gmail.com> - 2014-10-30 07:34 +0000
csiph-web