Comment on How do I avoid becoming one with the botnet?
bitcrafter@programming.dev 2 days agoThat does not sound so bad; the parent comment made it sound a lot worse than that.
Comment on How do I avoid becoming one with the botnet?
bitcrafter@programming.dev 2 days agoThat does not sound so bad; the parent comment made it sound a lot worse than that.
Wxfisch@lemmy.world 2 days ago
Eh, it can be a lot of work but doesn’t have to be. I’ve automated backups, and if you follow current best practice guidance from industry, you should use long pass phrases and not worry about regularly rotating them. For things like SSH keys, you can rotate them if you think you’ve had a breach but in normal usage there isn’t a huge benefit security-wise since they functionally can’t be guessed and would need to be stolen. If an adversary steals your SSH keys then you’re already pretty hosed as the next step is for them to establish another backdoor to access your server without needing your key.