full-disclosure - Re: !SPAM! Automated ssh scanning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org)
Subject: Re: !SPAM! Automated ssh scanning

On Thu, Aug 26, 2004 at 03:48:06PM -0500, Stephen Agar (Stephen.Agar@...cc.org) wrote:
> I had a "clue" before. We tell people that "after you install, patch
> everything and turn off unneeded services". I guess we should say, "go ahead
> and do all that, but you're still screwed". 

Turn it off?  If it is not needed, do not install it in the first place
or remove it before putting it into production.
-- 
Chief Gadgeteer
Elegant Innovations