Re: openssh-server's default config is dangerous

[Reco <recoverym4n@gmail.com>]

	Hi.

On Tue, Jul 12, 2016 at 11:26:10AM +0200, mwnx wrote:
> Currently, after installing openssh-server, anyone can gain access
> to any user's account on the system using only the corresponding
> user's password. As we know, people do not necessarily use the most
> secure of passwords. This will especially be the case if the user
> does not expect his computer to be accessible in any way from the
> outside.

So, you're blaming a perfectly good (and reasonably secure) way of
remote access, but somehow assume that weak passwords are ok.
By that logic you should not stop there. Why not blame any remote access
mechanism that uses PAM for password checking as well?

Reco