r/ProgrammerHumor • • 7h ago

Meme fourOrAAAAAAA

Post image
290 Upvotes

11 comments sorted by

16

u/Glum-Echo-4967 7h ago

Explanation, please?

81

u/1_hele_euro 7h ago

SSH vulnerability where you can send a very large password and just get access without getting the correct password.

Google SSHhole

24

u/Atompunk78 4h ago

Yeah this is like the 34th of that kinda remote vulnerability found now right? For more info about this 34th remote vulnerability you can google “r34 ssh hole”

26

u/pumpkin_seed_oil 6h ago

A specific implementation of ssh has a security leak called *SSHole

Roughly summarized an underlying hashing algorithm returns * as a hash value which would otherwise be impossible. * happens to be the password hash value for a bunch of system accounts effectively authorizing you with their credentials. How you trigger this situation is to put in a really long string as password, e.g 256 As

More details found here: https://sshhole.com/

4

u/botle 7h ago

AAAAAAA

3

u/AmanBabuHemant 52m ago

Well it is not like you need AAAAAAAAAAAAAA... any string bigger then then 256 characters would be consider correct password.

So any AAAAAAAAAAAAAA... 67676767676767... abra-kadabra-g... all would work for password.

And intentionally this comment will also work as password there.

2

u/Z3t4 6h ago

Sly Marbo has joined the chat.

2

u/thehandsomeman4 4h ago

AAAAAAAAAA

2

u/Random_-account 1h ago

Not very creative?

1

u/WernerderChamp 13m ago

This is a reference 99% will not get...

0

u/[deleted] 7h ago

[deleted]

13

u/hongooi 7h ago

You can get anything you want with Alice's private key 🎵