Ranter
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Comments
-
I use three step login: ssh + password + code from two step login of Google.
So ya I fucked up on the first step lol -
@CriticalFailure the funny thing I mistakenly pressed / which is above my enter key so it was sent with the password and I have fail2ban block for 24hours after one failed attempt 😅😓
-
@ymas I don't understand can you ease explain more?
My current auth is as follows:
1. Ssh key
2. Password
3. Auth code
All three must be provided or no ssh session will open
Oh and I also need to knock the port first before starting ssh -
ymas4717y@gitpush I don't know what your use cases are but this is what I do. I always disable password authentication because the thought of passwords going across the ether kinda scares me. Port 22 is *always* closed, I auto-block the entire subnet of any IP connecting on port 22. My firewall forwards to the correct box. I have two keys, one for a user that can't wheel and one for a user that can. They are stored on an encrypted filesystem and a passphrase is required to use them. All password checks are local. Take a look at these links:
https://security.stackexchange.com/...
https://security.stackexchange.com/...
Related Rants
Damn it gitpush focus when type the damn password!! I locked my self out of my server again ðŸ˜
Time to visit the portal and login 😒
rant
mistake
wrong password
tired