I need more info about devs getting infected over ssh in less than an hour. Unless they had a comically weak root password or left VNC I don't believe it at all

▲

gobdovan 9 hours ago | parent [-]

Yes, <1h was a weak root password. All attacks I've seen directly were always user error. The point is effectively removing attack surfaces rather than enhancing security in needlessly exposed internet-facing protocols.

	▲	dwedge 7 hours ago \| parent [-]
		It must have been comically weak, like "root", "password" or something like that