vegeta@lemmy.world to Technology@lemmy.worldEnglish · 9 days agoMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comexternal-linkmessage-square129linkfedilinkarrow-up1483arrow-down115
arrow-up1468arrow-down1external-linkMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 9 days agomessage-square129linkfedilink
minus-squareAHemlocksLie@lemmy.ziplinkfedilinkEnglisharrow-up26arrow-down1·9 days agoBut passwords need to be enabled for SSH. You must submit a faulty password of a specific kind, and the SSH server misinterprets it for passwordless accounts, which means the server must be configured to allow you to attempt a password.
But passwords need to be enabled for SSH. You must submit a faulty password of a specific kind, and the SSH server misinterprets it for passwordless accounts, which means the server must be configured to allow you to attempt a password.