@nixCraft@mastodon.social It has always been best practice to disable ssh password auth. Doing so as the f***ing standard saves a lot.