vegeta@lemmy.world to Technology@lemmy.worldEnglish · 2 days agoMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comexternal-linkmessage-square87linkfedilinkarrow-up1424arrow-down113cross-posted to: cybersecurity@sh.itjust.works
arrow-up1411arrow-down1external-linkMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 2 days agomessage-square87linkfedilinkcross-posted to: cybersecurity@sh.itjust.works
minus-squareAHemlocksLie@lemmy.ziplinkfedilinkEnglisharrow-up24arrow-down1·2 days agoBut passwords need to be enabled for SSH. You must submit a faulty password of a specific kind, and the SSH server misinterprets it for passwordless accounts, which means the server must be configured to allow you to attempt a password.
But passwords need to be enabled for SSH. You must submit a faulty password of a specific kind, and the SSH server misinterprets it for passwordless accounts, which means the server must be configured to allow you to attempt a password.