From 67b6a34315de828057a9cdb7593afb2a77968815 Mon Sep 17 00:00:00 2001 From: vrms Date: Mon, 10 Jun 2019 07:47:40 +0200 Subject: [PATCH] line 129: added link to reddit post about usernames popular for haccking attempts --- README.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/README.md b/README.md index 0de24ee4..9d098266 100755 --- a/README.md +++ b/README.md @@ -126,9 +126,7 @@ If you are on a fresh server and logged in as root, at first create a dedicated usermod -aG sudo [frappe-user] ``` -_(it is very common to name this user `frappe`, but this comes with the disadvantage of being -ranked very high in hackers circles for attempts to entering servers. So production sites it -is highly recommended to use a custom username harder to guess for)_ +*(it is very common to use "frappe" as frappe-username, but this comes with the security flaw of ["frappe" ranking very high](https://www.reddit.com/r/dataisbeautiful/comments/b3sirt/i_deployed_over_a_dozen_cyber_honeypots_all_over/?st=JTJ0SC0Q&sh=76e05240) in as a username challenged in hacking attempts. So, for production sites it is highly recommended to use a custom username harder to guess)* use --user flag to create a user and install using that user