Loading...
アイコン

Dreams of Code

チャンネル登録者数 17.3万人

6.1万 回視聴 ・ 3794いいね ・ 2024/09/29

Why I don't change SSH from port 22

To try everything Brilliant has to offer—free—for a full 30 days, visit brilliant.org/DreamsofCode . You’ll also get 20% off an annual premium subscription.

This video was sponsored by Brilliant.

If you're running a server with SSH on it, then hardening ssh is an important step to improving your system security. One approach to hardening SSH that many users perform is to change ssh off of the standard port of 22 onto something else.

In my case however, I tend not to do this, as I feel it's security through obscurity and ineffective. Not only does it not work, but, it can also cause other issues...

Become a better developer in 4 minutes: bit.ly/45C7a29 👈

Join this channel to get access to perks:
youtube.com/channel/UCWQaM7SpSECp9FELz-cHzuQ/join

Join Discord: discord.com/invite/eMjRTvscyt
Join Twitter: twitter.com/dreamsofcode_io

Video Links:
Okta STO: www.okta.com/identity-101/security-through-obscuri…
Privileged ports: www.w3.org/Daemon/User/Installation/PrivilegedPort…
Elastic Rule: www.elastic.co/guide/en/security/current/potential…
Fail2ban: github.com/fail2ban/fail2ban
DIgital Ocean Harden SSH: www.digitalocean.com/community/tutorials/how-to-ha…
Shodan: www.shodan.io/
GreyNoise SSH Bruteforcer: viz.greynoise.io/tags/ssh-bruteforcer-attempt?days…

00:00:00 - Intro
00:00:54 - Sponsor
00:02:17 - Security through obscurity
00:03:42 - It's only a matter of time
00:05:30 - Not all ports are the same
00:07:56 - Complexity is the enemy of security
00:08:25 - Obscurity as an indentifier
00:09:05 - Port Privilege
00:09:43 - More security issues
00:10:58 - Why I don't change the ssh port
00:11:27 - Other approaches to reduce log spa

コメント

コメントを取得中...

コントロール
設定

使用したサーバー: manawa