yeah, while reading this i was going “What maniac exposes SSH to WAN anyway…?” the whole time. I fail to see any reason or point that can be justified exposing SSH to WAN.
I used to have a synology NAS that would sleep of death itself. Synology support asked me to port forward SSH to the open internet and set no password so they could pull logs over the next few weeks.
Not the person you responded to, but I’ll give my unsolicited advice: I switched to Unifi NAS. QNAP has had a lot of security nightmares, and a bad habit of EOLing devices.
The best option might actually be using an old workstation and going with something like TrueNAS, but I enjoy the convenience of a purpose built box.
One big difference between Unifi NAS and something like QNAP or Synology, is that the Unifi NAS only does NAS work, it doesn’t run containers or “apps”. You need separate compute if you want to run containers.
Unifi actually sounds better. I’m the same and want my NAS to be optimized by someone smarter than me. I’ve been using qnap and don’t really care for half the crap they offer. They’re not as enshittified as Synology, but they’re getting there.
Any VPS provider just gives you an SSH IP and port. So that’s the default state, until you do something else, which I imagine many don’t, since key based authentication was always considered secure.
So I don’t know the reason, but that’s the standard practice with most providers, like Digital Ocean or Linode or whatever. You can call them maniacs but you shouldn’t be surprised at something so ubiquitous.
Speaking of which, what VPS provider would you recommend for private use? I just need something small and cheap for always on headscale, matrix, keyguard-app and the likes, but I have no idea where to start looking.
Literally anyone, I’m paying ~£40 a year for a fasthosts VPS, was kind of a what can I get in the next 5mins thing, rather than a deep dive in to features. I did have a VPS at one point that had some kind of Microsoft hypervisor that made me vomit in my mouth bit when I found out. Just watch out as the bottom end of the market is full of enshitification that you don’t notice at first until you want to change the rdns or some other basic thing
yeah, while reading this i was going “What maniac exposes SSH to WAN anyway…?” the whole time. I fail to see any reason or point that can be justified exposing SSH to WAN.
I used to have a synology NAS that would sleep of death itself. Synology support asked me to port forward SSH to the open internet and set no password so they could pull logs over the next few weeks.
Yes, it was legit synology support not a scammer.
No, I haven’t bought synology ever again.
What do you use now? Qnap?
I build my own stuff now. I tried qnap after synology but it just sucked in different ways.
Not the person you responded to, but I’ll give my unsolicited advice: I switched to Unifi NAS. QNAP has had a lot of security nightmares, and a bad habit of EOLing devices.
The best option might actually be using an old workstation and going with something like TrueNAS, but I enjoy the convenience of a purpose built box.
One big difference between Unifi NAS and something like QNAP or Synology, is that the Unifi NAS only does NAS work, it doesn’t run containers or “apps”. You need separate compute if you want to run containers.
One thing I didn’t know before buying a UniFi Nas was it does not support raid0 or jbod unfortunately
The sounds like a big one. Doesn’t affect me, but you’d think a lot of people would want one of those.
Unifi actually sounds better. I’m the same and want my NAS to be optimized by someone smarter than me. I’ve been using qnap and don’t really care for half the crap they offer. They’re not as enshittified as Synology, but they’re getting there.
Any VPS provider just gives you an SSH IP and port. So that’s the default state, until you do something else, which I imagine many don’t, since key based authentication was always considered secure.
So I don’t know the reason, but that’s the standard practice with most providers, like Digital Ocean or Linode or whatever. You can call them maniacs but you shouldn’t be surprised at something so ubiquitous.
Speaking of which, what VPS provider would you recommend for private use? I just need something small and cheap for always on headscale, matrix, keyguard-app and the likes, but I have no idea where to start looking.
Literally anyone, I’m paying ~£40 a year for a fasthosts VPS, was kind of a what can I get in the next 5mins thing, rather than a deep dive in to features. I did have a VPS at one point that had some kind of Microsoft hypervisor that made me vomit in my mouth bit when I found out. Just watch out as the bottom end of the market is full of enshitification that you don’t notice at first until you want to change the rdns or some other basic thing
Ah ok thanks, I was hoping there was like a de facto King of the scene but it’s actually much better if it’s a toss-up.
Also, thanks for the warning about the w-word, and my condolences