and here I thought "4" was the worst someone was going to screw up internet security this year
I know it's only with musl and no PAM but I have shipped multiple embedded systems that match that description
no one should hook up a USB to ethernet adapter to anything I've ever worked on and trying logging into root with a long-ass password.
@foone now I’m wondering if there’s _something else_ you put on those systems that you don’t want anyone finding! 😄
@UpLateGeek nah, just Doom.
@foone Password-auth required, and openssh required. I think all the systems I have deployed using musl use dropbear.
@foone I read openwrt was affected, but on my gl-inet Beryl AX it won’t work.
@foone 257 is the new 4
on the plus side, eMudhra would never have been vulnerable to this one; their keys are limited to values below 256.
@foone I'm not sure "4" was even the worst screwup on that day, but it was (and IMO remains) by far the most memeable
@foone we still have time for even worse ones :3
@foone nothing, or more than 256, it is both less, and more, than "4". So, there is going to be a "1 fail", a "2" one, a "3" one, and so on, isn't there?
