[tor-relays] My VPS relay has just been hacked

Libertas libertas at mykolab.com
Sun Oct 26 01:39:15 UTC 2014


For what it's worth, there's an operational security document on the Tor
wiki:

https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity

However, that document covers more advanced techniques mostly intended
for serious attackers such as government agencies. Others have already
mentioned to you the simplest options, which should keep you safe from
automated botnet hackers. These include: allow only public key
authentication on SSH, use fail2ban or sshguard, update frequently, and
don't run anything unnecessary (a torrent client, an HTTP/FTP server).

Some relevant links:

https://help.ubuntu.com/community/SSH/OpenSSH/Keys (if you're only going
to read/do one thing, make it this)

https://www.debian.org/doc/manuals/securing-debian-howto/index.en.html#contents

-Libertas


More information about the tor-relays mailing list