udc@lemmy.world to Selfhosted@lemmy.worldEnglish · 2 days agoHow to Setup a Secure Ubuntu Home Server: A Complete Guidewww.davidma.coexternal-linkmessage-square19linkfedilinkarrow-up11arrow-down10
arrow-up11arrow-down1external-linkHow to Setup a Secure Ubuntu Home Server: A Complete Guidewww.davidma.coudc@lemmy.world to Selfhosted@lemmy.worldEnglish · 2 days agomessage-square19linkfedilink
minus-squareStrixUralensis@tarte.nuage-libre.frlinkfedilinkEnglisharrow-up0·1 day ago Passwordless login only Never understood this I don’t think that anyone or anyrhing, computer or mentalist, will guess my 40+ characters long password
minus-squarenon_burglar@lemmy.worldlinkfedilinkEnglisharrow-up0·1 day agoWith ssh, over 90% of the vulnerabilities are abusing the password mechanism. If you setup pre-shared keys, you are preventing the most common abuses, including in the realm of zero days.
minus-squaresurph_ninja@lemmy.worldlinkfedilinkEnglisharrow-up0·1 day agoEspecially paired with Fail2Ban preventing any brute force attempts. But with a WireGuard setup, you need not have the port exposed at all.
minus-squareetchinghillside@reddthat.comlinkfedilinkEnglisharrow-up0·1 day agoAre you setting and managing other’s passwords?
Never understood this
I don’t think that anyone or anyrhing, computer or mentalist, will guess my 40+ characters long password
With ssh, over 90% of the vulnerabilities are abusing the password mechanism. If you setup pre-shared keys, you are preventing the most common abuses, including in the realm of zero days.
Especially paired with Fail2Ban preventing any brute force attempts.
But with a WireGuard setup, you need not have the port exposed at all.
Are you setting and managing other’s passwords?