SomeBoyo@feddit.de to Selfhosted@lemmy.world · 8 months agoWhat are common practice's for hardening/securing your server?message-square60fedilinkarrow-up144arrow-down10
arrow-up144arrow-down1message-squareWhat are common practice's for hardening/securing your server?SomeBoyo@feddit.de to Selfhosted@lemmy.world · 8 months agomessage-square60fedilink
minus-squareShortN0te@lemmy.mllinkfedilinkEnglisharrow-up0·8 months agoSecurity by obscurity is no security.
minus-squarePossibly linux@lemmy.ziplinkfedilinkEnglisharrow-up0·8 months agoIt is if you are defending against automation.
minus-squaretowerful@programming.devlinkfedilinkEnglisharrow-up0·8 months agoIt defends against the lowest level of automation. And if that is a legit threat in your model, you are going to have a bad time. It’s just going to trip you up at some point
minus-squarePossibly linux@lemmy.ziplinkfedilinkEnglisharrow-up0·8 months agoI’m not saying it should be your only defense. I’m saying that changing defaults is a good idea for secure systems. For instance, you should change the default WiFi password on your router.
minus-squaretowerful@programming.devlinkfedilinkEnglisharrow-up1·8 months agoYes, because a password is security
minus-squarePossibly linux@lemmy.ziplinkfedilinkEnglisharrow-up0arrow-down1·8 months agoSo is changing the port. It won’t do a lot in terms of security but it will help a tiny bit
Security by obscurity is no security.
It is if you are defending against automation.
It defends against the lowest level of automation. And if that is a legit threat in your model, you are going to have a bad time.
It’s just going to trip you up at some point
I’m not saying it should be your only defense. I’m saying that changing defaults is a good idea for secure systems.
For instance, you should change the default WiFi password on your router.
Yes, because a password is security
So is changing the port. It won’t do a lot in terms of security but it will help a tiny bit