Post by @cwebber@social.coop

Well it's a good thing I always disable ssh password authentication as the very first thing I make sure is done when setting up a machine. These days I do it declaratively on guix system installation

0 Boosts

0 Likes

Christine Lemmer-Webber

@cwebber@social.coop 13 min. ago

I think about a decade ago I wrote to one of the Guix mailing lists and argued that it was dangerous to have password authentication on by default and was overruled by people who were like "but how would I ssh in before I copy over my key"

I see it still defaults to on =_=

Christine Lemmer-Webber

@cwebber@social.coop 2 min. ago

I've filed an issue: https://codeberg.org/guix/guix/issues/12333

Codeberg.org

Turn the ssh (openssh, dropbear) password-authentication? default to #f

Six years ago I filed this bug: ``` > Okay, I just realized I left a friend vulnerable by guiding them through > a Guix graphical install and telling them it would give them a decent > setup. They turned on openssh support. > > Then I realized their config had password-authentication? on. > > T...