HW/FW security researcher & Demoscene elder.
I started having arguments online back on Fidonet and Usenet. I’m too tired to care now.
There’s no difference to the work I need to do to secure an open SSHd vs an open WireGuard server. None.
Yes I harden, and penetrate, systems for a living. If your systems need remote access there is no standard (neither in fintech or military) that classifies SSHd as being “worse” than a VPN.
Nuclear is cheaper than your average electricity cost.
I know because I’m Swedish and you use us as your cheap electricity.
Yeah I don’t do security via obscurity :D I agree you need to keep your Internet facing services up to date.
(No need to educate me on Wireguard, I use it. My day job is slightly relevant to the discussion)
Most countries on Earth would treat this as a global catastrophe and put up funds regardless of where it’s projected to impact.
Maybe not the current US, though.
Why would a Swedish ISP care? I’ve run servers from home since I first connected up in … 1996. I’ve had a lot of different ISPs during that time, although nowadays I always choose Bahnhof because of them fighting the good fights.
That attack vector is exactly the same towards a VPN.
It’s perfectly safe to run SSH on port 22 towards the open Internet with public key authentication only.
Which distro allows root to login via SSH?
A lot of what I do (hw/fw hacking) involves running Ghidra on code by others so it’s just a tool I know well. As I mentioned I seldomly step through my own code while debugging high level languages.
Depends on language and platform ;) Ghidra, strace, printouts gets you quite far. The only language I regularly step would be assembler.
Sublime Text.
The only thing I need from my editor is syntax highlighting and not be slow.
(Assembler, C, Python, Java and Bash are the languages I mostly work with)
I was macOS (desktop) and Linux (servers), but over time it just became cumbersome to cater to the - while Unix - different environment on the Macs all the time. I’ve now converted over the last Macbook Pro to Linux but what I really want is a Linux distribution really made specifically for the Macs and making full use of their somewhat special hardware.
If you’re more at home with macOS then this doesn’t apply to you of course :) A lot of the software I use is from the open source community where Mac gets supported because it’s possible to compile for it but it’s always an afterthought.
(Servers? Yeah that might surprise people - but the performance of Apple Silicon is really very interesting for a lot of tasks where you need “GPU-speedup” without installing a full GPU)
Bad for Linux. I see Asahi Linux on Apple hardware as being the “best Linux” for consumer use (and home servers) moving forwards.
We’re seeing a substantial increase on the Mastodon instance I help moderate too, but there’s no aggregate marketing department at Mastodon so we don’t get any headlines.
Why is your VPN jump box better than an SSH jump box?