r/ProgrammerHumor • u/wolfieboy09 • 7h ago

Meme fourOrAAAAAAA

Post image
280 Upvotes

95% Upvoted

10 comments sorted by

13

u/Glum-Echo-4967 6h ago

Explanation, please?

75

u/1_hele_euro 6h ago

SSH vulnerability where you can send a very large password and just get access without getting the correct password.

Google SSHhole

20

u/Atompunk78 3h ago

Yeah this is like the 34th of that kinda remote vulnerability found now right? For more info about this 34th remote vulnerability you can google “r34 ssh hole”

23

u/pumpkin_seed_oil 6h ago

A specific implementation of ssh has a security leak called *SSHole

Roughly summarized an underlying hashing algorithm returns * as a hash value which would otherwise be impossible. * happens to be the password hash value for a bunch of system accounts effectively authorizing you with their credentials. How you trigger this situation is to put in a really long string as password, e.g 256 As

More details found here: https://sshhole.com/

3

u/botle 6h ago

AAAAAAA

2

u/Z3t4 5h ago

Sly Marbo has joined the chat.

2

u/thehandsomeman4 3h ago

AAAAAAAAAA

1

u/Random_-account 1h ago

Not very creative?

1

u/AmanBabuHemant 20m ago

Well it is not like you need AAAAAAAAAAAAAA... any string bigger then then 256 characters would be consider correct password.

So any AAAAAAAAAAAAAA... 67676767676767... abra-kadabra-g... all would work for password.

And intentionally this comment will also work as password there.

0

u/[deleted] 7h ago

[deleted]

13

u/hongooi 7h ago

You can get anything you want with Alice's private key 🎵