Post · Fedizen

@davidrevoy@framapiaf.org 1 hr. ago

🗝️ Any passwords over 256 characters are fine.
Ref: https://sshhole.com/

#vulnerability #security

A comic in two panels

Panel 1. A wizard walks on the bridge in front of a castle, door closed. From the top of the castle a guard shoot:
Guard: Halt! Do you have the password?!
Wizard:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Panel 2. Shot on the guard:
Guard: "That's correct, please enter!"
Wizard: ...? — A comic in two panels Panel 1. A wizard walks on the bridge in front of a castle, door closed. From the top of the castle a guard shoot: Guard: Halt! Do you have the password?! Wizard:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Panel 2. Shot on the guard: Guard: "That's correct, please enter!" Wizard: ...?

*sshole · sshhole.com

openssh on musl linux has been letting people into password-less accounts since 2016.

#vulnerability #security

3 Boosts

0 Likes

@dbat@mastodon.gamedev.place 19 min. ago

@davidrevoy Speak frenemy and enter.

@Killator@framapiaf.org 22 min. ago

@davidrevoy Finally ! I understand now !!! 😅

https://youtube.com/watch?v=ZlIz0q8aWpA

Castle of Aughhhh - Holy Grail

YouTube

@faoluin@chitter.xyz 24 min. ago

@davidrevoy *Summons @volpeon !*

@nodami@hcommons.social 24 min. ago

@davidrevoy
🤣🤣🤣🤣🤣🤣🤣

@eickot@mastodon.social 32 min. ago

@davidrevoy that's safety!

@amateur_ninja@mastodon.online 43 min. ago

@davidrevoy Huh, that explains why our IT department has been yelling the password all morning.

@leberschnitzel@existiert.ch 44 min. ago

@davidrevoy oh no that's also my password!

This federated comment is not yet available here.

@davidrevoy@framapiaf.org 45 min. ago

@jaseg I hope it gets fed to a 'generate meme' website at some point. It'll be quicker for me that way!

@Sobex@social.sciences.re 57 min. ago

@davidrevoy Is the HD version available somewhere ?

@davidrevoy@framapiaf.org 55 min. ago

@Sobex Only on my disk, but I quickly uploaded here: https://www.peppercarrot.com/extras/temp/2026-11-05_AAAAAAA_joke_hi.jpg

Sorry, no caption provided by author

will have been preventable

@virtulis@loud.computer 57 min. ago

@davidrevoy somewhere, a cat is finally gaining root access

@davidrevoy@framapiaf.org 56 min. ago

@virtulis 😹 True!

@radekcrlik@witter.cz 59 min. ago

@davidrevoy best security news today :)

@spitfire@mastodon.de 1 hr. ago

@davidrevoy wit, it's not "4"? 😆

@davidrevoy@framapiaf.org 58 min. ago

@spitfire 😂 no, it's now 4444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444

@computernut43@nexto.my 24 min. ago

@davidrevoy @spitfire ha

@Tacitus@masto.bike 28 min. ago

@davidrevoy @spitfire 😂

@rick@a.n0id.space 1 hr. ago

@davidrevoy never thought you could 'recycle' a comic so fast

(regarding 4 XD)

@davidrevoy@framapiaf.org 57 min. ago

@rick In this "vulnerability era", I feel I'll can prepare myself to make a weekly derivation of this one 😆

@bison@mastodon.social 1 hr. ago

@davidrevoy i get my security incident news from your comics now i guess ^^"

France Jor☝️:blob_disapproval:

@jor@eldritch.cafe 1 hr. ago

@davidrevoy 🙃

Denis :flan_le_french:

@ledeuns@bsd.network 1 hr. ago

@davidrevoy I love running jokes 😂

@hnapel@mastodon.social 31 min. ago

@ledeuns @davidrevoy

Can I use 256x'A'+'4'?

@davidrevoy@framapiaf.org 15 min. ago

@hnapel @ledeuns Yes, anything > 256 characters

A screenshot of the code (source: thumbnail opengraph of the sshole.com website) with two lines highlighted in yellow:

l.152
KEY-MAX 256

l.219
if (i > KEY MAX) — A screenshot of the code (source: thumbnail opengraph of the sshole.com website) with two lines highlighted in yellow: l.152 KEY-MAX 256 l.219 if (i > KEY MAX)