sshole(sshhole.com)
2888 points by josemrb | 707 comments
Vulnerability writeup explaining how OpenSSH on musl-based Linux without PAM accepts any 257–1024 character password for accounts locked with '*', with an in-browser demo.
#crypt on Hacker News
1 story tagged crypt, newest first.