In August an external penetration test listed twenty three of our Linux servers as accepting SSH password logins. Our hardening playbook had set PasswordAuthentication no on every one of them since the day they were built, and its compliance run, in check mode every night, reported nothing to…
Read Full Article on DEV Community →