Hacker News Reader

Vastly fewer attacks -> less cognitive load on admins. The logs don't fill up.

Technical protection is likely limited, but then, admin attention is also a limited resource.

Also means attackers are much easier to spot in the logs. It's also a point of real interest if an attacker took the time to port scan you first in order to detect which port your ssh is on.

Or, if you prefer, you're choosing to associate with a higher grade of adversary.

Reply on news.ycombinator.com