sshhole

Barely coherent animations every three sentences make this a really unfun read. And, is it just me, or do none of the very overly verbose explanations actually ever explain how those behaviors come together to produce a vulnerability? I had to ignore the prose and put the code snippets together to get what actually…

This is a bad writeup IMO. It never bothers to explain how the different changes combined to produce the vulnerability, nor does it explain the changes with enough fidelity for a reader to piece it together themselves: - If the first 2012 change did what the prose claims, users with `*` `shadow` entries on musl…

It's an interesting vuln, but this glossy website presentation style that buries the lede (am i affected, what to do), is really annoying to read through. I know that named-vuln-site itself is a cliche that some people roll their eyes on, but in comparison: - https://heartbleed.com/ - https://spectreattack.com/ -…