The order of files in /etc./SSH/sshd_config.d/ matters (and may surprise you)

https://utcc.utoronto.ca/~cks/space/blog/sysadmin/OpenSSHConfigOrderMatters

Gerando chaves SSH apenas com o Powershell http://dlvr.it/TJxphF via PlanetPowerShell #Powershell #SSH #CSharp #DotNet

Seriously, the Outlaw botnet? Still pulling off SSH brute-force attacks in 2024?! Wild how that's *still* getting results. It really just hammers home the point: the fundamentals are absolutely crucial!

You've gotta have solid password habits locked down. Things like key authentication, maybe changing the default SSH port, setting up Fail2ban... c'mon, it isn't exactly brain surgery, right?

But yeah, setting it up takes a bit of effort, doesn't it? And we all know time equals money...

Working as a pentester, I see it way too often – companies cutting corners precisely on these foundational steps. They'd rather splash out on flashy AI security tools, yet leave the digital front door practically wide open. Then, inevitably, everyone acts shocked when things go sideways.

So, I gotta ask: What "basic" security measures do you see getting consistently overlooked where you work?

Lost #ssh access to my #FreeBSD VPS after enabling #pf :D

If I have a #codeberg account set up, with a verified #ssh key on my account and the corresponding public and private keys in `~/.ssh/`, is there a way that I can make it so that it doesn't ask me for my keyphrase every time I push? I'm sure VSCode could do this, but since I've switched to #Helix, which doesn't have git built-in I've been manually doing the git stuff.
My knowledge of #cryptography and #git are well and truly at the 'barely enough to get myself into trouble' level.
#AskFedi

i need some guidance from all you smarties out there on the fedi.
i have headless #debian server.
no remote root login, but sudo user is available.
trying to run "shred" command on a few HDDs.
obviously this is a very time consuming process.
how can I initiate this process via #SSH and logout of the pty without killing the shred process?

Another reason to hate Systemd: I’ve been fucking around for the last 30 minutes trying to switch off password login in sshd and doubting myself big time.

I’ve changed the sshd_config file but I can still login with a password. I’ve rebooted. Same problem.

Turns out that I have to ALSO edit or delete 50-cloud-init.conf in sshd_config.d directory.

What a load of fucking shite.

„Turnsshuh-Administration“

### #Cloudflare open sources #OPKSSH to bring Single Sign-On #SSO to #SSH

This week, it was officially open-sourced under the umbrella of the #OpenPubkey project, itself became a #Linux Foundation open-source initiative in 2023, OPKSSH remained closed-source until now. Making it easy to #authenticate to #servers over SSH using #OpenID Connect (#OIDC), allowing developers to ditch manually configured SSH keys in favor of identity provider-based access.

https://www.helpnetsecurity.com/2025/03/28/opkssh-sso-ssh/

Cloudflare open-sources OPKSSH, bringing single sign-on to SSH with OpenID Connect and eliminating the need to manage long-lived SSH keys.
https://linuxiac.com/cloudflare-open-sources-opkssh/

It will never not bother me that the "port" parameter for SSH is lower-case -p while for SCP it's upper-case -P

This is the kind of annoying crap I expect from Microsoft, not Unix

It's #nerd tip o'clock:

After 2 days using #ssh on the new computer, and needing each time it wakes from sleep, to re-ssh into the machine where a program I use daily runs in a screen session, I took 5 minutes to reinstall #Mosh (mobile shell) and updated my alias from "ssh" to "mosh".

https://mosh.org/

Runs inside your terminal
Get rid of network lag
Change IP. Stay connected
including if the client goes to sleep and wakes up later or loses internet connection

A few words on SSH public keys read from AuthorizedKeysFile(s) and obtained programmatically from OpenSSH's AuthorizedKeysCommand program.

https://jpmens.net/2025/03/25/authorizedkeyscommand-in-sshd/

What do you use to manage the contents of ~/.ssh/authorized_keys?
Roughly, in how many distinct remote locations do you manage that file?
Do they generally contain the same set of keys, or is there some variation? #ssh #OpenSSH #SysAdmin #DevOps

Uff! This stuff is good to know:

“When You Deleted /lib On Linux While Still Connected Via SSH” [2022], Yohanes Nugroho (https://tinyhack.com/2022/09/16/when-you-deleted-lib-on-linux-while-still-connected-via-ssh/).

Via HN: https://news.ycombinator.com/item?id=43444160

On Lobsters: https://lobste.rs/s/zmgtvx/when_you_deleted_lib_on_linux_while_still

TIL about SSH's `BatchMode`:
> If set to yes, user interaction such as password prompts and host key confirmation requests will be disabled. [...]

From [the manpage](https://manpages.debian.org/bookworm/openssh-client/ssh_config.5.en.html#BatchMode)

Really useful if you script SSH a lot.