One vulnerability (such as the in the post) does not make a trend.

You want to compare these for me? https://app.opencve.io/cve/?product=glibc&vendor=gnu https://app.opencve.io/cve/?product=musl&vendor=musl-libc

CVE-2016-6210. ask sshd about a user that doesn't exist and it says no instantly, cause there's nothing to hash. [The solution is] sshd grabs some other account's salt and hashes your password anyway

I'm not sure how this is relevant to what caused this bug. Seems to me like a random point that was added by the AI writing this blogpost without human review.

Attacker hacks into a system, sees that it's running a GPL libc rather than a MIT libc and then politely excuses themselves because they aren't willing to share their spoils.

Bad code is bad code, no matter what license it's written in.

Ssh is not a gnu application.

You're absolutely right. I just read the article and as it pointed out OpenWRT I wanted to make sure and tested it anyway. OpenWRT doesn't even have any SSHD packages available, so that's good. But as I've installed the OpenSSH-sftp-server package quite a few times I probably got confused on top of that as well.

musl is far more ..........., secure, .......

you are funny. i wish i could attend one of your standups 😹

44 never worked for me, I had to stay pinned to 43. Maybe this one will? :/

I did run it for a couple of year in the past. It was solid.

maybe they were making a comment on the licensing instead of a culture war since there's several high profile examples of right shifting underway?

Not denying it could be faulty, obviously. Just wouldn't be accepting it as just 'age'

What's the best way to learn regex?

I have a tough time reading man pages. It seems to be harder since everything went to systemd. After 20 years of Linux use, I still feel really dumb. I'm just now getting better with Vim keying.

Is there a trick to reading man page formats? I'm a bit autistic and not an intuitive communicator. Sometimes I wish man pages had more example commands. I also wish there was a way to freeze the format at the top while scrolling options so I didn't need to have 3 windows open to see format, scroll options, and have another open for actually typing.

On desktops without a UPS maintaining power during outages (or where a power outage lasts longer than the UPS battery).

Also you can sometimes recover the session even if it freezes on wake and you have to do a hard power down.

There were times I appreciated having it on windows, when I figured the session was lost and was surprised to see it all load back up on login.

I see I misunderstood what Staff said, thanks.

Yeah, I think you're right. Maybe bazzite isn't for me. I just have that tinker itch every now and then.

And hey, a live service game I'm playing recently had a massive hack that many people affected had to reinstall their OS just for self assurance. That somehow also could affect people running Linux. So I might as well hop to another distro this weekend.

Also in addition to that info, I like about musl to be able to compile without relying on glibc, which is a "common" (notice I set it in quotes, don't take it literally) source of dependency problem. Often if there is a glibc dependency problem, then you can't do much about it, because the entire system relies on the correct one. With musl your application doesn't depend on external library.

Been using Cosmic on Artix for the better part of the year(I like wayland, don't like systemd). No issues with Artix(dinit). Cosmic was pretty buggy when I started but it's recently gotten to the point of being a solid daily driver.

musl is far more POSIX compliant, secure, and cleaner code (no dirty hacks) than glibc. Not everything has to be a culture war. Do you use sudo (ISC-style)? Do you use curl (MIT-style, curl license)? Even OpenSSH isn't GPL (BSD). Not everything is a plot; vulnerabilities happen regardless of what license you pick.

I thought openwrt uses dropbear? Looks like I have password auth turned off anyways so I'm good.

sometimes it feels like the drawbridge to the foss world is drawing more and more closed off as things like systemd & the linux kernel pre-comply with the us hegemony's demands.

got tired of macos trying to trick me into installing the AI frosted glass edition number of the year variant.

i like how AI is getting people to consider alternatives that they might not have considered before otherwise. lol

Competition.

Why are trying to replace the Gnu tools with non-GPL stuff again?

openssh on musl linux (alpine, openwrt, buildroot, yocto, and a lot of the docker images you've pulled)

Holy crap þat was a journey