Twitxy Saved

I)ruid

Verified account TVP

@druidian

NIP-05:druid@caughq.org - Cleverly disguised as a responsible adult. Founder @TrammellVC, @Blockhenge, & @Rogue__Signal. My opinions are my own. #Bitcoin ∞/21M
San Juan, Puerto Rico dustintrammell.com Joined April 2008
1.3K Following 16K Followers 44K Posts

Latest posts 5

I)ruid Verified account @druidian
It's not only important to be honest with others, it's important to be honest with yourself, too.
SightBringer Verified account @_The_Prophet__ 23h
⚡️ There is a strange kind of prison that human beings build without ever realizing it.

It begins with a single contradiction.

Something you know is wrong, but choose to live with.

A belief. A relationship. A career. An entire understanding of who you are.

You make one decision to preserve it. Then another to justify the first. Eventually, so much of your life depends on the original assumption that questioning it feels more dangerous than continuing to believe it.

And that is how a small lie becomes an entire reality.

But something extraordinary happens when you finally confront it.

Your decisions change.

Those decisions expose you to experiences you would otherwise never have encountered.

Those experiences reveal truths you were previously incapable of seeing.

And those truths change you again.

The moment you stop defending a false version of reality, you begin creating a future that was inaccessible to the person defending it.

Think about what that means.

Your mind is capable of changing the conditions that will shape its own future development.

You can participate in the transformation of the very intelligence making your decisions.

And perhaps the most unsettling realization is this:

Some of the greatest possibilities in your life are invisible to you because they belong to a version of yourself that does not yet exist.

The path to that person begins with a truth you are finally willing to face.

The future changes when the mind creating it changes.
View quoted post on X
I)ruid Verified account @druidian
Wow.
Officer's Notes Verified account @officer_secret 2d
An OpenSSH bug that took 46 years to ripen!

1980

UNIX puts * in the password field of system accounts. The idea is simple: it’s not a real hash, so it can’t be brute-forced and you can’t log in with a password.

2012

The musl libc developers decide that returning NULL from crypt() on failure is dangerous - programs often forget to check it and crash with a segfault. So they return an error string instead.

Guess which one?

The same asterisk: *.

Three weeks later they add a length limit: passwords longer than 256 bytes burn CPU. Anything longer is rejected. And since it’s an error, crypt() returns *.

2016

OpenSSH fixes a timing attack (CVE-2016-6210). If a user doesn’t exist, the server still hashes the password with a fake/borrowed salt so an attacker can’t tell valid usernames by response time.

2022

Alpine Linux changes the locked root password in /etc/shadow from ! to * so SSH keys work properly on cloud images.

… and the loop closes!

You connect over SSH as root (whose shadow entry is *).

You type any password longer than 256 characters (e.g. 300 As).

crypt() hits the length limit → returns * → OpenSSH compares it with the value in the database → that value is also * → you’re in as root.

That chain took 46 years (!!!) to complete.

Every individual change was reasonable. Together they produced a perfect * == * authentication bypass (CVE-2026-123158, nicknamed *sshole). Fixed in OpenSSH 10.6p2 and Alpine packages.
View quoted post on X
0 replies 1 reposts 8 likes 1.9K views View on X
I)ruid Verified account @druidian
Truth. @nytimes lies. Constantly.
Peter Schiff Verified account @PeterSchiff 4d
After I decisively won my defamation lawsuit and secured a judgment against five defendants, The New York Times ran the following headline.

“Australian Media Company to Pay Peter Schiff to End Defamation Suit.”

The court awarded me damages exceeding the statutory cap and ordered the defendants to pay indemnity costs, a rare award reserved for particularly egregious conduct.

The headline makes it sound as though the company paid me to settle. In fact, the defendants lost, and the court ordered them to pay me. The headline doesn’t even name the Australian media company or mention the journalists who also lost and were ordered to pay damages.

I believe Matthew Goldstein and The New York Times deliberately framed the story to cover for his Australian partner Nick McKenzie. In my view, the headline and article were designed to deny me the public vindication I won in court.

Because of that misleading article, Wikipedia refuses to acknowledge that I won my lawsuit, even though the Federal Court of Australia published the judgment on its official website. Wikipedia is treating the Times as a more reliable source on the outcome than the court that issued the judgment.

The Times uses its undeserved reputation to disseminate fake news. Nothing you read in The New York Times can be believed.

9fraud.com/wp-content/upl…

@MattGoldstein26
@nytimes
@Ageinvestigates
View quoted post on X