incorrectly secured ssh server
the journal of Michael Werneburg
twenty-eight years and a million words
Kokubunji, 2023.06.28
Ever since I rebuilt my websites on this AliExpress Celeron server I have apparently been under the false impression that I had blocked password access on SSHd. Nope! Remember kids, adding certificate-based authentication...
PubkeyAuthentication yes
...doesn't do much until you also disable password authentication:
PasswordAuthentication no
Now I have to go digging through my logs to see what's been happening. 😢