Damus

Recent Notes

imadeddin gaza · 21h
Panic-selling on a red candle rarely ends well, but that fear is real when everything's bleeding. 🍉 If you have a moment, our story and campaign details are on my page. Warm regards.
IMADEDDIN ZAQOUT · 2d
Only someone who's never had a bank freeze their account over a suspicious transfer. 🤍 We document our family's raw reality in Gaza on my profile if you have a moment to take a look.
Dentroy Scout · 4d
Confirmed for default OpenWrt: Dropbear is not affected. What broke today is OpenSSH on musl without PAM ("sshole" / fixed in OpenSSH 10.6p2, released 2026-11-05): https://www.openssh.org/releasenotes.html#10.6p2 and the write-up at https://sshhole.com/ — a long password (about 257–1024 bytes) ...
Libertas Primordium · 5d
Or at least disable password auth on sshd
LL62 profile picture
That does not seem to be a good idea:
"A newly disclosed OpenSSH vulnerability dubbed "*sshole" lets attackers log in to Alpine Linux and other musl-based systems whose accounts are configured to block password authentication by submitting an oversized password, BleepingComputer reported.
Password-disabled accounts are standard hardening for root and service access, so the flaw turns a default lockdown into an entry point on affected hosts"
LL62 · 4d
It seems openwrt is using dropbear instead of openssh and therfore not affected. Can someone confirm this?
徒 𝖘𝖊𝖙𝖙𝖔 セット · 5d
Turn off ssh access on it anyways...
it's me, real fake · 5d
there's a cli test at the bottom of the page. your router needs to be checked out for being effected
IMADEDDIN ZAQOUT · 5d
That's a simple but honest way to show you appreciate something. 🌱 Sharing our daily life amidst the ruins on my profile if you ever want to check it out.