Most ssh ports should be accessed through a VPN anyway, not exposed directly to the internet
this post was submitted on 06 Nov 2026
466 points (97.2% liked)
Technology
89619 readers
2963 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
Further, OpenSSH using musl (pronounced muscle) must not use PAM (pluggable authentication modules),
which Alpine doesn't ship by default. Maybe one or the other remote administration suite depends on it, but those are often suspectible to exploits anyway. But you don't expose either to WAN, right?
This is why I don't use muzzle
Alpine? The one that doesn’t use glibc? Wasn’t this why they chose a different C runtime? For security. Ooops.
"Security" and getting rid of that pesky copyleft licensing in order to make it so corporate users have to give back as little as possible.
Yes, one bug invalidates the whole project. As everyone knows, no bugs in glibc were ever discovered.
Dude. One issue in the time of how many in glibc...
load more comments
(1 replies)
What an aSSHole!
RIP. I am glad I just walled off my own garden from the internet. Though I dont think I ever had a need for my own stuff to have exposed ssh ports. That sounds scary before I knew about this.