360
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices (arstechnica.com)
submitted 1 day ago by to c/technology@lemmy.world
82 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 88 points 1 day ago (16 children)

The only time I ever exposed my SSH port to the WAN, I got about 750 connection attempts from China and 250 attemps from Russia per hour.

  • permalink
  • fedilink
  • source
  • hideshow 16 child comments
    •
  • [–] 23 points 21 hours ago* (8 children)

    yeah, while reading this i was going "What maniac exposes SSH to WAN anyway...?" the whole time. I fail to see any reason or point that can be justified exposing SSH to WAN.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 27 points 18 hours ago (6 children)

    I used to have a synology NAS that would sleep of death itself. Synology support asked me to port forward SSH to the open internet and set no password so they could pull logs over the next few weeks.

    Yes, it was legit synology support not a scammer.

    No, I haven’t bought synology ever again.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 5 points 16 hours ago (5 children)

    What do you use now? Qnap?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 15 hours ago (3 children)

    Not the person you responded to, but I'll give my unsolicited advice: I switched to Unifi NAS. QNAP has had a lot of security nightmares, and a bad habit of EOLing devices.

    The best option might actually be using an old workstation and going with something like TrueNAS, but I enjoy the convenience of a purpose built box.

    One big difference between Unifi NAS and something like QNAP or Synology, is that the Unifi NAS only does NAS work, it doesn't run containers or "apps". You need separate compute if you want to run containers.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 14 hours ago

    Unifi actually sounds better. I'm the same and want my NAS to be optimized by someone smarter than me. I've been using qnap and don't really care for half the crap they offer. They're not as enshittified as Synology, but they're getting there.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 11 points 19 hours ago*

    Any VPS provider just gives you an SSH IP and port. So that's the default state, until you do something else, which I imagine many don't, since key based authentication was always considered secure.

    So I don't know the reason, but that's the standard practice with most providers, like Digital Ocean or Linode or whatever. You can call them maniacs but you shouldn't be surprised at something so ubiquitous.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 9 points 14 hours ago (2 children)

    Yet some people will still say with a straight face "tHeRe iS nO hYbRiD wAr!1!1"

    Not in Ba Sing Se at least...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •