Re: [Trisquel-users] SSH Server Enabled By Default!

[gaming4jc2]

WOW, this is a major issue. Not because it's SSH, but because it's the MOST  
INSECURE SSH setup I've ever seen. Just tested scanning my local area network  
running a Trisquel box. It runs on a default port with password based  
authentication (no KEYS!). What this means essentially is any script kiddie  
in the world can run a dictionary attack against all your local user accounts  
and gain remote access to your files.

Writing the developer mailing list about this seriously messed up default  
right now.......