Good point about a default deny approach to users and ssh, so random services don’t add insecure logins.

The one db I saw compromised at a previous employer was an AWS RDS with public Internet access open and default admin username/password. Luckily it was just full of test data, so when we noticed its contents had been replaced with a ransom message we just deleted the instance.

What a deservedly scathing review of the US of A.

hope you’re happy

Or better, hope your losing sleep and sick to your stomachs and ready to take action in every available protest, election, boycott, donation, etc.

I started messing with Linux, then became a developer. Whatever draws your interest!