News for hackers. Stuff that matters.

A comment on Sshole. Parent comment

Re:Sshole by epihelix on Thursday November 05, 2026 @10:58PM (#50387988)
> How is password auth weaker than key auth?

Well, it's a heck of a lot weaker in this instance (at least when `PasswordAuthentication no`)

[ Parent | on HN ]
Re:Sshole by ahepp on Friday November 06, 2026 @05:39PM (#50399461)
In this specific instance yes, but it seems like it could have about as easily been a perfect cascade of failures in janky libc routines for checking keys as opposed to janky libc routines checking passwords.
[ Parent | on HN ]