fwknop is a bit lower risk though. If all an attacker can do is open a port, the... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

notpushkin 20 days ago | parent | context | favorite | on: I close SSH port 22 (and what I use instead)

fwknop is a bit lower risk though. If all an attacker can do is open a port, they’ll still have to exploit OpenSSH.

akshayrajeshwar 20 days ago [–]

fwknop's default is to run as root, so there's that. Support for separation of privileges is still pending since 2013 (https://github.com/mrash/fwknop/issues/32)

notpushkin 20 days ago | [–]

Good point, thanks.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact