169
*sshole is a banger of a name (feddit.nl)
submitted 14 hours ago by to c/lemmyshitpost@lemmy.world
16 comments fedilink hide all child comments
 

all 16 comments

sorted by: hot top controversial new old
[–] 25 points 14 hours ago

your alpine is vulnerable because you need SSH, my Alpine is vulnerable because its out of date. we are not the same

  • permalink
  • fedilink
  • source
    •
    [–] 7 points 13 hours ago (10 children)

    What is "certicate based authentication" ?

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] 4 points 12 hours ago (9 children)

    ssh allows you to add trusted public key. When you ssh from a computer that has the private key, it will immediately log you in without asking for your password.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 3 points 12 hours ago (8 children)

    Ok, but what's a certicate?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] [S] 3 points 10 hours ago (2 children)

    Overly basically, it's a file based way to prove you can log into an account

    There is information in file that the computer can verify that you created the certificate on this computer while already having access to this account, therefore you are allowed access.

    In most contexts, digital certificates are considered more secure than a password for authentication, so in creating one, it's a pretty typical thing to disable being able to log in with a password. However, this bug allows account access with a garbage password.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 12 hours ago (3 children)

    I think they meant certificate, and are perhaps referencing the eMudhra incident?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 11 hours ago* (2 children)

    No, there was an SSH vulnerability discovered a day or two ago, which allows anyone to bypass the certificate check during authentication. So if your SSH is configured to only use a certificate, (not cert and password) then anyone can log into your shit.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 11 hours ago (1 child)

    Huh, I must have missed that one. Alpine/musl as well then? Got a ref?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 10 hours ago*

    Yes, it specifically affects the OpenSSH/Alpine/musl interaction. It’s a vulnerability in how Alpine/OpenSSH interfaces with musl, and allows anyone who can reach your SSH port to instantly log into a passwordless account by entering over 256 characters into the password field.

    The vuln is nicknamed *sshole, if you want to search it. Because it only works on passwordless accounts, (meaning it has a * in the password field). And the most common use-case for passwordless accounts is because you’re using cert-based authentication instead. Thus the warnings that if you’re using cert-only SSH, you’re most likely vulnerable.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 6 points 13 hours ago (2 children)

    I left the alpine face cover one time in my car in the door pocket, and that happened to be the night my car got stolen and they stole it. Not only did they steal the alpine but every single thing I had in my car, even a old blanket I used when we went to the beach all covered in sand

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 4 points 9 hours ago

    My Alpine is safe because I have winter tires

  • permalink
  • fedilink
  • source
    •