Find the AI nobody approved.Learn more
Hacker News12h ago2,236 points560 commentslive
sshole
OpenSSH on musl-based systems accepts any password longer than 256 characters for accounts that should never have passwords, due to a 2012 musl libc change where crypt() returns '*' on failure instead of NULL.
Read the full story atsshhole.comWhy this is in the Signal
LAXIMA AI Signal curates the highest-velocity stories across Hacker News, GitHub trending, and new Hugging Face / Replicate model releases — quality-filtered, deduplicated, and refreshed every four hours. This item surfaced from Hacker News with 2,236 points (by josemrb). We link straight to the original source above — see the full live feed.
More AI Signal briefs
- HNSearch for everyone
- HNMotorola Signature 27 with GrapheneOS support
- HNStarfall – Affordable, routine access to microgravity
- HNDiscord is ditching Electron and its new app uses less RAM
- HNAlpine Linux Security Advisory: OpenSSH-server password authentication bypass
- HNLemmings CSS Animation
- HNInsects don't swarm at LED lights
- HNImages 2.6