[TriLUG] ssh question

[William Sutton via TriLUG]

people also hijack for botnets.  they use open machines as jumping off 
points to target other systems so they can't be (easily) traced.

and just because you don't think you've been hacked, doesn't mean you 
haven't been.  Ask OPM.  Or Target.  Or the DNC.  Or...

Go read Cliff Stoll's book _The Cuckoo's_Egg.

At the risk of soundy like a grumpy greybeard, this is one more reason I 
don't want an IoT.

William Sutton

On Mon, 24 Oct 2016, Brian via TriLUG wrote:

> On 10/24/2016 12:08 PM, Grawburg via TriLUG wrote:
>> Here's why security is not an issue.
>> 1. The remote Pi (2 floors below) will be accessed for less than 10 minutes 
> and then only a couple of times a month.
>
> Invaders need less than a few seconds to compromise an insecure machine.
>
>> 2. There is no data anyone would want to view or steal even if they could 
> get into the network.
>
> Theft isn't the only bad thing that hackers do.  Profit is not the only 
> motive.  Vandals gonna vandalize; how badly would your day be ruined to 
> come to work and find that every hard drive on every computer that 
> happened to be on overnight had been wiped?
>
>> 3. If we've not had anyone hack into our network since I've been here (8 
> years) I don't think they're going to.
>
> There's always a first time.
>
> I recommend configuring the remote Pi's firewall, at a minimum, to only 
> accept originating connections from the client Pi.
>
> Cheers,
> -B
>
>
>
> -- 
> This message was sent to: William <william at trilug.org>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that 
> address.
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web	: 
> http://www.trilug.org/mailman/options/trilug/william%40trilug.org
> Welcome to TriLUG: http://trilug.org/welcome