Top
Best
New

Posted by josemrb 10 hours ago

sshole(sshhole.com)
2128 points | 532 commentspage 7
peanut-walrus 2 hours ago|
What this tells me is that musl+openssh-server is an incredibly uncommon setup, as "at least 257 character string" is literally the third thing I try after "admin" and "12345" when greeted with a password input.
oefrha 10 hours ago||
This is a super duper annoying site for people who just want to know if their systems are vulnerable, after patching like a dozen critical vulnerabilities in other software over the last week and are almost at the breaking point of resigning.

Can we have a “don’t treat me like five/toddler” / “idgaf about the explanation” quick link to a section for adults who need to patch systems?

(And if your reaction is “just scroll down, stupid”, I’m happy to report that with the scroll jacking, I scroll not enough / past the critical sections nine out of ten times.)

Edit: You may want to read https://sshhole.com/#exposure.

rmunn 9 hours ago||
Thanks for mentioning that before I tried to scroll down. Forewarned, I was able to click on the "2026" link once the left-handed "scrollbar" (not the right word but I can't figure out what the right word should be) appeared, which let me jump past most of the verbiage and get to the "are you affected?" section just a couple pages later.
jamal-kumar 9 hours ago||
[flagged]
cozzyd 2 hours ago||
Good thing my yocto images use glibc...
titzer 8 hours ago||
I'm starting to realize that trusting some random people who wrote the gruddiest, boringest, most torturous low-level stuff might have been a bad plan.

At this point I feel embarrassed in front of the AIs.

ChrisRR 10 hours ago||
Can we just have a site with the text and images without the awkward scrolling crap? Hijacking basic features is an instant click away from sites for me

Edit: It seems to work fine on mobile. I'm not sure why the scrolling behaviour was added on the desktop version of the site

ctrlaltdileep 9 hours ago||
That's kind of shocking. I guess the swarm of AI related vulnerability findings continues.
vdfs 9 hours ago|
It's shocking that it took so long with the amount of investment and hype you'd expect this kind of bugs to be already fixed, but it still need a human to tell the agents what to do, which could also work with any fuzzing framework
muddi900 9 hours ago||
I would like to read this but the scrolling is completely broken on iPad Safari
nialv7 5 hours ago||
This AI slop write-up is so fucking annoying to read. I don't even mind the AI generated website. Why can't you even bother to spend like an hour to properly sum up the exploit yourself?
gosen 10 hours ago||
I really like creativity in the name, the way website built and the content

"tl;dr" was a bit of a downgrade though, but that's fine

it's a nice way to promote the company behind it

bombcar 10 hours ago|
The real name of this is sshole - the is the "star" of the show, after all.
yreg 10 hours ago|
*sshole, the * is the star of the show

You can use \ to escape formatting.

bombcar 7 hours ago|||
Ugh! HN got me, too
More comments...