News for hackers. Stuff that matters.
Re:Sshole by xorcist on Thursday November 05, 2026 @12:29PM (#50381832)
How did you arrive at that conclusion? If anything, this vulnerability happened because someone decided to change the behaviour of crypt() without fully understanding the consequences. This specific vulnerability did not exist in 2004.
Re:Sshole by timhh on Thursday November 05, 2026 @01:55PM (#50382903)
I agree with him. I only managed to get asterisks enabled by default in sudo because sudo-rs isn't owned by people who have decided that the 70s was the perfect decade and nothing should ever change. And look at the insane pushback when it did!

I can't even get an obvious UX improvement through PAM because they like it broken.

https://github.com/linux-pam/linux-pam/issues/778