vegeta@lemmy.world to Technology@lemmy.worldEnglish · 6 days agoMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comexternal-linkmessage-square129linkfedilinkarrow-up1480arrow-down114cross-posted to: cybersecurity@infosec.pub
arrow-up1466arrow-down1external-linkMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 6 days agomessage-square129linkfedilinkcross-posted to: cybersecurity@infosec.pub
minus-squareesc@piefed.sociallinkfedilinkEnglisharrow-up95·6 days agotldr: disable password auth in ssh. Also name misses the point I think, it’s a musl-hole.
minus-squarevrighter@discuss.tchncs.delinkfedilinkEnglisharrow-up8·5 days agowhich you should have been doing anyway for anything exposed to the internet
minus-squareAnn Archy@lemmy.worldlinkfedilinkEnglisharrow-up14·5 days agoi mean assholes are muscle holes.
minus-squareesc@piefed.sociallinkfedilinkEnglisharrow-up1arrow-down1·5 days agoYeah, but they are very specific kind of muscle hole. 🙃
minus-squarejj4211@lemmy.worldlinkfedilinkEnglisharrow-up3·6 days agoYeah, any application checking passwords would be vulnerable.
tldr: disable password auth in ssh.
Also name misses the point I think, it’s a musl-hole.
which you should have been doing anyway for anything exposed to the internet
i mean assholes are muscle holes.
Yeah, but they are very specific kind of muscle hole. 🙃
Yeah, any application checking passwords would be vulnerable.