News for hackers. Stuff that matters.

A comment on Sshole. Parent comment

Re:Sshole by TZubiri on Thursday November 05, 2026 @09:24AM (#50379433)
password doesn’t get sent to the server, hash does.

but I guess that the hash is always the same unlike with pub priv key mechanism.

[ Parent | on HN ]
Re:Sshole by traceroute66 on Thursday November 05, 2026 @09:29AM (#50379501)
> password doesn’t get sent to the server, hash does.

Kind of irrelevant.

Password is already easily defeatable before it even leaves your computer, thanks to keyloggers and/or password manager breaches and/or old-school shoulder surfing (assisted by covert filming and AI).

[ Parent | on HN ]
Re:Sshole by mkj on Thursday November 05, 2026 @09:44AM (#50379705)
No, you are wrong. The password gets sent to the server.
[ Parent | on HN ]