• 0 Posts
  • 33 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle















  • You’re making it that much easier for someone to brute force logging in or to exploit a known vulnerability. If you have a separate root password (which you should) an attacker needs to get through two passwords to do anything privileged.

    This has been considered an accepted best practice for 20+ years and there’s little reason not to do it anyways. You shouldn’t be running things as root directly regardless.