sshole(sshhole.com)
2888 points by josemrb | 707 comments
Vulnerability writeup explaining how OpenSSH on musl-based Linux without PAM accepts any 257–1024 character password for accounts locked with '*', with an in-browser demo.
1 story on the front page, newest first. Scroll down to watch the site change over time.
2888 points by josemrb | 707 comments
Vulnerability writeup explaining how OpenSSH on musl-based Linux without PAM accepts any 257–1024 character password for accounts locked with '*', with an in-browser demo.