Another good reason not to open port 22
Another good reason not to open port 22
In the past two weeks I set up a new VPS, and I run a small experiment. I share the results for those who are curious.
Consider that this is a backup server only, meaning that there is no outgoing traffic unless a backup is actually to be recovered, or as we will see, because of sshd.
I initially left the standard "port 22 open to the world" for 4-5 days, I then moved sshd to a different port (still open to the whole world), and finally I closed everything and turned on tailscale. You find a visualization of the resulting egress traffic in the image. Different colors are different areas of the world. Ignore the orange spikes which were my own ssh connections to set up stuff.
Main points:
-
there were about 10 Mb of egress per day due just to sshd answering to scanners. Not to mention the cluttering of access logs.
-
moving to a non standard port is reasonably sufficient to avoid traffic and log cluttering even without IP restrictions
-
Tailscale causes a bit of traffic, negligible of course, but continuous.
You're viewing a single thread.
I am not in IT, what does this mean ?
Computers communicate across networks using ports. Port 22 is a commonly used remote administration port called ssh. Bots go around probing computers with an open port 22 hoping to find badly secured or outside misconfigured ssh servers to turn them into bots and crypto miners, etc.
Its crazy people can do all these stuff. I can't even edit my word document. Being said that I want to learn IT but looks hell stressful for $100-$200k job. I was in content & marketing making $130k and we used to discuss about shades of color to use in a font for 3-4 weeks. Its crazy how you guys have to fix issues within minutes on those tickets. The more i learn about IT, I feel like I should stay away from it.
I can't edit Word documents for shit lol. I edit everything using Markdown (the same formatting used here) because I don't have to think about it.
That said every job can get stressful now and again, and this line of work is no different, but most days it's just work. Make this change, make this thing do something else, kill this thing that's costing money and everyone stopped using last year without telling anyone, etc. Typical things.
Not everyone in IT needs to fix tickets or work in a high-stress environment. In one of my previous roles, I was a projects engineer, and I was basically given a bunch of projects to work on (like there was a small python-based project - they needed to automate something; then there was one to get them into a hybrid cloud setup; another project to upgrade something and so on). I didn't really have any break-fix tickets to work on, although I was occasionally asked if I could help, when there was some spare time or if it was something high-level the ops guys couldn't fix. Basically a total chill job, I was free to allocate time on my projects as I saw fit, no hard deadlines, no SLAs to meet, and the best part - no users to deal with.
Of course, it wasn't always like this. To get here, I had to do those grunt roles first, those stressful jobs with tickets that needed to be fixed in minutes, dealing with angry users and stuff. But thankfully my career has progressed past that stage now.
One of the sad aspects of my job (in IT) is building tools to eliminate less stressful jobs, especially ones that pay well (usually management or accounting, in my case). Design has definitely been a specific target in recent years though -- off the top of my head I could at least imagine two approaches to writing a tool that automates color and font selection with results comparable to human expertise.
This is one reason it's a good idea to regularly study new things (IT or otherwise). I have to retool every few years as whatever I know becomes obsolete -- this used to mainly be a frustration in IT, but is rapidly becoming a necessary process in other fields. It won't be necessary to become an IT expert, but I would keep up-to-date on how to use the new tools technology provides... especially if I wanted to keep a job in say, graphics design or copywriting!
(Incidentally, my first job in this country was in marketing! It was high-stress and I did not earn 130k. I recall font and color choice processes vividly :D)
Yea dont create anything bro. 100k-200k is nothing in 2023. Like you can't even afford a decent house for a family. I do my 9-5 with the least work possible and go home. Tried starting a business but failed miserably so back to 9-5.
Yeah... I couldn't cope with that unfortunately (I'm a bit jealous, it sounds nice). I need to work long hours and make things, it's a compulsion. "Taking it easy" can stress me out to the point where I end up in a hospital.
So I sold all my worldly possessions and immigrated to the developing world on an investment visa (where things are made). My timing was a few years early, but I had no path to a decent life left except having my own company in a growth economy -- my entire industry vanished twice overnight in my home country due to changes in legislation.
Nowadays, looking at the local economy, there is no path to home ownership except for people who own companies, and maybe senior executives or senior software engineers. An average university-educated couple would have to save 100% of their income for their entire adult life to afford a nice home -- if they don't have kids. I think this kind of cruel equation is slowly coming to the West too -- although you guys have more land so I guess it takes longer.
Feel for you brother. Dont get dominated by stupid 9-5 managers, directors, CEO instead try dominating them. They cant do all thr work by themselves , even if they fire you, its a 9-5 job. You have to take what's yours legally or illegally. Look at the history from colonization to new era Capitalism. More power to you bro!
Perhaps ironically, I live in a nominally Communist country that went through decolonization quite a number of times. It doesn't change much in my daily life (I'm not really political), although I arguably own some tiny slice of the means of production these days. So maybe in retirement I'll provide public access to those for working class people. That would be really fun, I think. Who knows what we might create together? Certainly if the machines are sitting unused in my retirement, they are creating nothing, and I would feel sad for the machines.
I don't do the whole 9-5 thing. That would stress me out! I work as long as I feel like, any day of the week I feel like. Generally, this is really nice for both managing stress (there's always tomorrow!) and steamrolling over any competition.
I'm just a mercenary (and a bureaucrat) though. You pay my fee in filthy lucre, and the job gets done -- legally, and reliably. If someone annoys me with politics at a client, I just try and replace them with a computer program. The result is that several of my best coworkers are machines these days. I foresee that trend increasing with time.