Hardening the Box: Minecraft Server Security Below the Game

A Minecraft host has one port that must face the internet and a dozen that must not. The JVM flag that turns your server into a remote shell, the protocol that broadcasts its own password, the SSH default that is actually the problem, and the second computer inside every dedicated box.

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.