Sshole

(sshhole.com)

96 points | by josemrb 28 minutes ago

8 comments

  • neuroticnews25 1 minute ago
    That's a well-made site, yet I feel nothing.
  • illusive4080 6 minutes ago
    From the other thread’s source [1], it affects musl without PAM. You can set PasswordAuthentication=no or update to remediate.

    [1] https://hachyderm.io/@damienmiller/117563026759098135

  • hypfer 5 minutes ago
    What is out there that uses musl without PAM and hosts an SSHd with PasswordAuthentication?

    As in: "Actually out there"

    The hypothetical Alpine exists, yes, but what runs that like that?

    • jbyers 2 minutes ago
      A staggering number of Docker containers?
      • hypfer 1 minute ago
        Docker containers that run sshds?
  • cube00 1 minute ago
    > except a lot of programs never check for NULL. they just compare whatever crypt() gives back with the stored field, hit the NULL, and crash

    > so musl (the libc under alpine) goes ok fine, crypt() just won't return NULL anymore. if it fails, it returns a single character instead.

    Considering it's been accepted that crashing if malloc returns a NULL is your fault, did musl really feel the need to accommodate bad implementations like this or is this just AI dribble?

  • pluc 11 minutes ago
    A+ name
  • bombcar 10 minutes ago
    The real name of this is sshole - the is the "star" of the show, after all.
    • yreg 7 minutes ago
      *sshole, the * is the star of the show

      You can use \ to escape formatting.

  • rvz 15 minutes ago
  • gosen 2 minutes ago
    it's so creative on all levels - the name, the way website built and the content!

    "tl;dr" was a bit of a downgrade though, but that's fine