Hacks, Linux

Defaults changed for OpenSSH config in Kubuntu 14.04 Trusty Tahr

I rebuilt a box this morning, and when I installed openssh-server, I found a different option set as default in the config file–one that I believe is less secure. Where previously, the default Authentications section looked like this: # Authentication: LoginGraceTime 120 PermitRootLogin yes StrictModes yes The default now looks like this: # Authentication: LoginGraceTime 120 PermitRootLogin without-password StrictModes yes…

Continue Reading