• SSH1 less safe than SSH2 • Uppgrade your SSH & OpenSSH often (OpenSSL lib*) • Avoid remote root login • Make own implementations of configuration, strict IP & User