SSH brute-force attacks on the rise

[MikeD]

http://arstechnica.com/news.ars/post/20080515-strong-passwords-no-panacea-as-ssh-brute-force-attacks-rise.html


Thanks to the end-of-term for many colleges and some K12 schools, brute-force attacks against SSH servers surged sharply this past weekend, according to the SANS Internet Storm Center. The sudden jump in SSH attacks merits a re-examination of how such servers should be properly secured.

[anjanesh]

Hmmm...I hope this is not a reason for Joe not to provide SSH on the servers.

[larry]

The one big reason is probably due to the security hole Debian informed everyone about with predictable keys affecting Debian and Ubuntu.

It was an easy fix, just install the updated packages and regenerate the keys :)

I think having ssh access is almost a must have these days, SFTP makes things so much more secure. When I'm on vacation it's nice to know my password won't get grabbed during an insecure ftp over the hotels wireless network.

[admin]

It's coming ... I know you've heard that before, but DA is in the process of putting their blessing on the latest jail ... should be any day now.