Twitxy Saved

rijndael

Verified account This account is verified. Learn more

@rot13maxi

making weird things with computers
Joined May 2011
4.3K Following 23K Followers 39K Posts

Latest posts 5

rijndael Verified account @rot13maxi
Holy cow.

Turn of ssh passwords is always good practice but wow
International Cyber Digest Verified account @IntCyberDigest 4d
‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.

The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.

It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".

Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
View quoted post on X
5 replies 3 reposts 17 likes 3.2K views View on X