Linuxmaster14 (@Linuxmaster14)

She knew about the Alpine root exploit all along!

https://thehackernews.com/2026/11/openssh-issues-emergency-fix-for-flaw.html #linux #security #cve

The Hacker NewsOpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine LinuxOpenSSH 10.6p2 fixes a critical password bypass allowing access to key-only accounts on affected Alpine Linux servers using long passwords.

Stephan Meijer @smeijer4d

"musl's crypt() refuses passwords longer than 256 bytes and returns * to signal the error. That * matches the stored *, so sshd accepts the login." 🤦

Younes @younes-ioquoted4d

omg! i couldn't believe it until i read this https://www.openssh.org/releasenotes.html#10.6p2

openssh.orgOpenSSH: Release NotesOpenSSH release notes

Márk Magyar @xHeaven4d

What the hell, lol

Linuxmaster14 @Linuxmaster146d090aec0

Here's the first #linux hashtag on /dev/null!

Karl Murray @krlmrr6d

No hashtags

Linuxmaster14 @Linuxmaster146d0229d84

Still building!

LLinuxmaster14@Linuxmaster14Nov 2

Monday again. Let's build.

Linuxmaster14 @Linuxmaster14Nov 2a5a4014

Monday again. Let's build.

Linuxmaster14 @Linuxmaster14quoted6d

Still building!

Linuxmaster14 @Linuxmaster14Nov 155d749a

Critical LXD & MicroCloud flaw: CVE-2026-112816 (CVSS 10.0). Patches are out. Update now! https://thehackernews.com/2026/11/critical-lxd-and-microcloud-flaw-cvss.html

The Hacker NewsCVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyCanonical patches CVE-2026-112816 in LXD and MicroCloud, a CVSS 10.0 flaw enabling trusted client impersonation without private keys.

Linuxmaster14 @Linuxmaster14Nov 17b597fa

bash

echo "Happy Halloween, devs! 🎃👻"

Linuxmaster14 @Linuxmaster14Nov 1035c24c

BTW, I love using @resend for transactional emails.

Linuxmaster14 @Linuxmaster14Oct 31f26b18e

I've been working on @uptyio, a monitoring platform for websites, APIs, and servers. Still building. v1.0 is getting closer! https://upty.io

UptyWebsite & server monitoring — UptyMonitor website uptime, APIs, hosts, certificates, domains, DNS, scheduled jobs and application logs in one Upty workspace.

Mohammed Samgan Khan @msamganNov 1

This looks good man.

Linuxmaster14 @Linuxmaster14Oct 305686205

Just shipped a new batch of updates at @magicwpio. Team Workspaces, API Tokens, MCP integration, bulk updates, and more. Check out what's new: https://magicwp.io/blog/magicwp-updates-teams-api-mcp-backups

MagicWPMagicWP Updates: Teams, API Tokens, MCP and Backups | MagicWPOctober's MagicWP updates bring team workspaces, scoped API tokens, AI-assisted site management, retained backups and site-wide WordPress updates.

Linuxmaster14 @Linuxmaster14Oct 302b67d2c

Linux. Forever. 🐧

SSURFT!$@Surft14Oct 30

windows or linux?

Linuxmaster14 @Linuxmaster14Oct 30c763a6a

Critical Linux kernel vulnerability: CVE-2026-98432 (CVSS 9.8). The fix is out, but not all distributions have released patched packages yet. Check your kernel updates! https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html

The Hacker NewsLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsUbuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.

Linuxmaster14 @Linuxmaster14Oct 29b832ce1

BREAKING: World's largest crypto exchange Binance hacked with over $5.6 billion stolen: • $1.45 billion $BTC • $875 million $ETH • $234 million $TRX • $50 million $XAUT • $1.57 billion $USDT • $823 million $USDC…

Show thread