Top all-time · #8413
Aris' Blog
Personal blog · blog.0xbadc0de.besecuritysystems
Aris' Blog is a personal blog at blog.0xbadc0de.be about security and systems. Since 2014, 9 different Hacker News readers have linked it 9 times, most often “SSH: Best practices”. It is still writing: the last post was on 2025-01-01, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
Security posts, including one on why /bin/false is not a security measure for SSH users and others on NIST's randomness beacon and trust in it. Commenters cite them as sources in those discussions.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- SSH: Best practices3 people · 3 mentions · first linked 2016-01-21
- Dual_EC_DRBG backdoor: a proof of concept2 people · 2 mentions · first linked 2014-01-01
What Hacker News says?
SSH best priactices [0] says: - Use public key authentication - Encrypt your private keys - Check the Host keys - Use SSH Agent - Use a different key for every computer - Disable password authentication - Do not SSH cross-server - Use safe algorithms - Use agent forwarding at appropriate times - Use SSH certificates - Use a smartcard - Remove all system passwords - Use Two-factor Authentication [0] https://blog.0xba…
Comment linking /archives/300
on “/bin/false is not security (2005)”Submitted SSH: Best practices as a story · 284 points
HN discussionOr that because it comes from NIST I should trust it because some unrelated persons have won awards. Let's not forget a likely backdoor that was either consented to, or worse, permitted with extreme incompetence. [0] Do you work for NIST or NSA? Just curious. [0] http://blog.0xbadc0de.be/archives/155
Comment linking /archives/155
on “NIST Randomness Beacon”Submitted Dual_EC_DRBG backdoor: a proof of concept as a story · 175 points
HN discussionThis comment is factually incorrect on a number of levels. 1) single-handedly killed US government crypto export restrictions - Bernstein certainly litigated, but was not the sole actor in this fight. For example, Phil Zimmerman, the author of PGP, published the source code of PGP as a book to work around US export laws, which undoubtedly helped highlight the futility of labelling open source software as a munition:…
Comment linking /archives/155
on “Debunking NIST's calculation of the Kyber-512 security level”Submitted The war against autocomplete=off (2013) as a story · 79 points
HN discussionSubmitted SSH: Best practices as a story · 4 points
HN discussionSubmitted OpenSSL and LibreSSL PRNG, what’s different? as a story · 2 points
HN discussionSubmitted OpenSSL and LibreSSL PRNG, what’s different? as a story · 1 points
HN discussion
