Hacker News Reader

Zerotier is the easy way around. Also remember to block all ssh access at standard ports.

That implies running SSH on another, non-standard port makes it safer -- when a simple port scan would reveal it. It's a classic security through obscurity fallacy, IMHO,

I did not say/imply that the user should implement a ONLY non-standard port as security.

Sure " simple port scan would reveal it" - but for those other script kiddes that do not do have it prevents it. And BTW, every bit helps of security helps. zerotier at an alternative port is slightly better than port 22.

Reply on news.ycombinator.com