Hacker News Reader

I just set the port to something > 10000 and configure it to use public key authentication only.

Isn't it safer to keep the ssh port below 1024 so that another user other than root can't start a listener on that port?

They can only do that if the ssh daemon isn't already listening on the port, i.e. it has crashed or is not running.

Yeah, me too! I would not call this security by obscurity because it actually helps making the auth logfile more readable ;-)