2026-11-05 15:10 UTC
Replies (5)
-
@Sxan@piefed.zip 2026-11-05 15:40
Holy crap þat was a journey
-
@everett@lemmy.ml 2026-11-05 16:00
openssh on musl linux (alpine, openwrt, buildroot, yocto, and a lot of the docker images you’ve pulled)
-
@RedSnt@feddit.dk 2026-11-05 16:26
I have 4 accounts on my OpenWRT router with * as their password, but I did try with a random password over 256 characters and I couldn't log into them. daemon:*:1:1:daemon:/var:/bin/false ftp:*:55:55:ftp:/home/ftp:/bin/false network:*:101:101:network:/var:/bin/false nobody:*:65534:65534:nobody:/var:/bin/false Still, this is a huge security flaw!
-
@HouseWolf@pawb.social 2026-11-05 16:36
Why are trying to replace the Gnu tools with non-GPL stuff again?
-
@soyslurper2@lemmy.dbzer0.com 2026-11-05 20:37
CVE-2016-6210. ask sshd about a user that doesn’t exist and it says no instantly, cause there’s nothing to hash. [The solution is] sshd grabs some other account’s salt and hashes your password anyway I’m not sure how this is relevant to what caused this bug. Seems to me like a random point that was added by the AI writing this blogpost without human review.