full-disclosure - OpenSSH is a good choice?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <9b13f6c104122114363d064275@mail.gmail.com>
From: infsec at gmail.com (Willem Koenings)
Subject: OpenSSH is a good choice?

on Tue Dec 21 14:54:44 EST 2004, Ron DuFresne wrote

> the non std port advice is not worth much, security through
> obscurity kinda thing.

wrong. non standard port helps quite well against automated scans.
most targets nowadays are searched via automated scans. if you are
painted red, you get attention. this is first step - stay gray. but if
you are already set up as a target, this would not help you. this
helps you NOT getting up as target for someone, who just searching
some servers for fun - scriptkiddies.

W.