Using open source licenses while not disclosing internal architecture [migrated]

I am close to release of a webapp, and I am currently preparing the cookie policy, privacy agreement…etc. I want to legally cover my bases, and follow the licenses of dependencies, however, I have concern about that document actually be… Continue reading Using open source licenses while not disclosing internal architecture [migrated]

Should I be worried about unusual SSH login attempts from unknown IP addresses?

I’ve been monitoring my server’s SSH logs and noticed a steady stream of login attempts from unknown IP addresses, mostly from different countries.
Heaps and heaps of account names are tried, and with some quick server stats I’d say, at le… Continue reading Should I be worried about unusual SSH login attempts from unknown IP addresses?

Does using a VPN to allow ssh connections provide better security, especially after seeing how CVE-2024-3094 (XZ backdoor) is done?

For my own (public) servers, is it considered a good idea to only allow ssh connections from VPN connections (OpenVPN, Wireguard or otherwise), to mitigate any possible attacks in the future on ssh?
It seems that ssh is constantly under at… Continue reading Does using a VPN to allow ssh connections provide better security, especially after seeing how CVE-2024-3094 (XZ backdoor) is done?