Gerando chaves SSH apenas com o Powershell http://dlvr.it/TJxphF via PlanetPowerShell #Powershell #SSH #CSharp #DotNet

Seriously, the Outlaw botnet? Still pulling off SSH brute-force attacks in 2024?! Wild how that's *still* getting results. It really just hammers home the point: the fundamentals are absolutely crucial!

You've gotta have solid password habits locked down. Things like key authentication, maybe changing the default SSH port, setting up Fail2ban... c'mon, it isn't exactly brain surgery, right?

But yeah, setting it up takes a bit of effort, doesn't it? And we all know time equals money...

Working as a pentester, I see it way too often – companies cutting corners precisely on these foundational steps. They'd rather splash out on flashy AI security tools, yet leave the digital front door practically wide open. Then, inevitably, everyone acts shocked when things go sideways.

So, I gotta ask: What "basic" security measures do you see getting consistently overlooked where you work?

Lost #ssh access to my #FreeBSD VPS after enabling #pf :D

Looking at the #logs is quite entertaining sometimes: repeated #ssh #scan from 92.255.85.0/24 well, #whois? Some provider with .hk and legal address Hong Kong something.
Traceroute? 50 ms from Amsterdam, 1.8 ms from Moscow. All hops are RU providers. Am I getting something wrong or it's a bit sus?

UPD
second-from-the-top source in the list is actually the same, just a different AS
AS57523 AS59425
Going to ask the upstream to ban the whole range.
#security #bots

If I have a #codeberg account set up, with a verified #ssh key on my account and the corresponding public and private keys in `~/.ssh/`, is there a way that I can make it so that it doesn't ask me for my keyphrase every time I push? I'm sure VSCode could do this, but since I've switched to #Helix, which doesn't have git built-in I've been manually doing the git stuff.
My knowledge of #cryptography and #git are well and truly at the 'barely enough to get myself into trouble' level.
#AskFedi

i need some guidance from all you smarties out there on the fedi.
i have headless #debian server.
no remote root login, but sudo user is available.
trying to run "shred" command on a few HDDs.
obviously this is a very time consuming process.
how can I initiate this process via #SSH and logout of the pty without killing the shred process?

Tailscale und Minecraft funktioniert.
Musik- und Videostreaming vom Homeserver sollte auch gehen, aber es wollen erstmal ~13 TB Mediendateien indiziert werden. Server ist belastet, aber wird kaum warm. SSH vom Handy ohne Port-Forwarding am Router läuft. Ich hab, was IT angeht, für heute Feierabend. Cheers!

„Turnsshuh-Administration“

Intéressante technique pour l’authentification #SSH basée sur des clés récupérées dynamiquement : https://jpmens.net/2025/03/25/authorizedkeyscommand-in-sshd/ #sysadmin

Cloudflare open sources OPKSSH to bring Single Sign-On to SSH https://www.helpnetsecurity.com/2025/03/28/opkssh-sso-ssh/ #authentication #Cloudflare #opensource #GitHub #News #SSH

Cloudflare open-sources OPKSSH, bringing single sign-on to SSH with OpenID Connect and eliminating the need to manage long-lived SSH keys.
https://linuxiac.com/cloudflare-open-sources-opkssh/

Der @leyrer ist einer meiner persönlichen Helden. Er erklärt immer sehr unterhaltsam Themen rund um SSH, Kommandozeile und Co. die man auch wirklich gut bei der Arbeit anwenden kann und das Leben häufig leichter machen.

Liebe geht raus für seinen Einsatz.

Leider habe ich bisher nie live die Ehre gehabt, aber es ist ja noch nicht aller Tage Abend und ich hoffe er macht noch einige Talks.

Überzeugt euch selbst:
https://media.ccc.de/search?p=Der+Leyrer

It's #nerd tip o'clock:

After 2 days using #ssh on the new computer, and needing each time it wakes from sleep, to re-ssh into the machine where a program I use daily runs in a screen session, I took 5 minutes to reinstall #Mosh (mobile shell) and updated my alias from "ssh" to "mosh".

https://mosh.org/

Runs inside your terminal
Get rid of network lag
Change IP. Stay connected
including if the client goes to sleep and wakes up later or loses internet connection

A few words on SSH public keys read from AuthorizedKeysFile(s) and obtained programmatically from OpenSSH's AuthorizedKeysCommand program.

https://jpmens.net/2025/03/25/authorizedkeyscommand-in-sshd/

What do you use to manage the contents of ~/.ssh/authorized_keys?
Roughly, in how many distinct remote locations do you manage that file?
Do they generally contain the same set of keys, or is there some variation? #ssh #OpenSSH #SysAdmin #DevOps