DigiNews

Tech Watch by Johan Denoyer

← Back to articles

sshhole

Quality: 7/10 Relevance: 9/10

Summary

A technical post detailing a password-authentication flaw in musl-based Linux images used by Alpine and similar distributions. It explains how OpenSSH on musl accepts passwords longer than 256 characters due to crypt() behavior, traces a timeline from early UNIX to recent patches, and outlines practical remediation steps such as upgrading OpenSSH or disabling password logins.

🚀 Service construit par Johan Denoyer