I need to check my fridge...

I refuse to believe this is not a backdoor.

something interesting to note here is that while this isn't a memory safety vulnerability, a modern systems programming language with better error handling could have easily avoided this whole situation. error handling in C is a PITA, and we're paying the cost of decades of pretending that it's not a problem

came for the name, stayed for the story

I desperately want someone to create a single-letter subdomain here.

Haha insane, great find and write up

rich felker was such a f* (funny) guy back in the mplayer days too

never changed i guess

It’s dumb and negligent to be missing “PasswordAuthentication no” in 2026. It’s been so for at least ten years. OpenSSH should have turned off password auth in the defaults years ago.

Are articles like this deliberately designed to make it to the frontpage of HN?

This is fine :)