Comment on Update all your stuff, NOW - again.
irotsoma@piefed.blahaj.zone 5 days ago
People use * as an account password, or sysadmins allow that? I’d never allow that on any system or service of mine. No surprise, like most of these LLM discovered issues in the media lately, it hasn’t come up before. 💯 Good they’re getting fixed, but nothing so far has really been that urgent to fix for me.
smiletolerantly@awful.systems 4 days ago
No,
\*is being put as a hash of a password, originally precisely because that would mean no actual hash (over any input) ever matches it.irotsoma@piefed.blahaj.zone 4 days ago
Ah got it, so is that a hack to prevent a specific user from logging in rather than something like:
Match User <username> PasswordAuthentication no