Hacker News new | ask | show | jobs
by tptacek 660 days ago
Use a password to encrypt a key or config you save on a cloud drive. `age` is good for this.
2 comments

Actually, banning reduces traffic less than you might think. These days most of the attackers assume they are going to be banned. You get a lot of singleton requests from IP addresses that don't show up again, or not any time soon. And if your banning system generates logs of its own, it just increases the log noise.

As a result of this HN discussion, I disabled all SSH logging, and turned off the associated banning system. I disabled the use of PAM by sshd, and set its logging level to FATAL (because the ERROR level stupidly still logs when sshd is not able to find a shadow entry for a user ID).

I'm confident they are not getting in by guessing a password and no longer believe there is a net saving in resources by monitoring and banning.

how do you get into the cloud drive though?
Were you getting into it with an SSH password? Then it doesn't matter for this discussion.

The point isn't that passwords are evil, it's that SSH passwords are evil.