41–50 of 56 posts
Earlier quoted context omitted.
If you still had access today, it would be a perfect platform for Bitcoin mining.
Did you not see those specs? Or is it that for some strange quirk of something my Iris is a great money making machine?
Alright, I'll bite. Why did the attacker mine primecoin (rather than bitcoin, or any of a dozen other cryptocurrencies)?
Because primecoin is easier to mine because of the difficulty rate
I found a 68K SGI Iris 2400 machine up and running in college in about 2004. It had a sticker with the hostname on it. Later on that week, I went to the department homepage, got the staff roster and tried to guess the usernames. I telnetted to port 25 and tried RCPT TO hypothesized names, like so $ telnet host 25 MAIL FROM: a@a.com 250 Sender OK RCPT TO: afranks 550 Recipient not found RCPT TO: arty.franks 250 Recipi…
Why not disable password logins completely, use PKI for all connections, and while we're at it, restrict logins to known hosts? Also, don't use passwordless keys. Then there's moving sshd off of port 22 to provide some obscurity. Yada yada yada... How many times will we have to go over this subject?
Earlier quoted context omitted.
Because primecoin is easier to mine because of the difficulty rate
More precisely, Bitcoin mining is dominated by specialized hardware (ASICs), so non-specialized computers have almost zero impact or revenue potential in the Bitcoin network. Litecoin and Primecoin are less ASIC-friendly, so ordinary computers stand a better chance at actually finding a block because they don't have the massively overpowered competition.
Or if you're going for something really obscure, why not Junkcoin?
I guess PrimeCoin is in 6th in capitalization... maybe it's in that sweet spot of not overly competitive but still capable of retaining some value: http://coinmarketcap.com/
Why not disable password logins completely, use PKI for all connections, and while we're at it, restrict logins to known hosts? Also, don't use passwordless keys. Then there's moving sshd off of port 22 to provide some obscurity. Yada yada yada... How many times will we have to go over this subject?
Is there any way server-side to determine if a key is passwordless or not?
How about a password like this? 1|2|3|4 or 1!2!3!4 — probably not nearly as guessable and more secure. But yes, not using 1234 as your default password for anything is sound advice that everyone should know.