My passord is a single * and i run #AlpineLinux. Am I vulnerable?

@ncopa @remmy @q3k you have bigger problems if you still run alpine <3.21 tbh

@amszmidt @tony @huronbikes @GossiTheDog no one uses crypt functions from glibc (which I've been told are deprecated), everyone uses libxcrypt.

@amszmidt @tony @huronbikes @GossiTheDog but POSIX goes on its way to only define one failure on which it should fail (-ENOSYS)

Also, libxcrypt by default does not return NULL on failure at all.
Honestly it's ssh's fault for checking crypt() on a user where it knows doesn't have a password. It is relying on the check to fail instead of failing early. Sure, it was done this way to add delay so one couldn't probe users .. but what prevents you from running crypt and disregarding its return value, on users w/o passwords?

Urgent: Immediately set 'PasswordAuthentication no' in /etc/ssh/sshd_config and restart the sshd service. Make sure you have ssh key authentication or other ways to access your machines.

Also make sure to update openssh to the latest version.

The openssh fix will be backported all the way back to Alpine 3.16

https://openssh.org/releasenotes.html#10.6p2

#security #AlpineLinux

New patch releases for Alpine Linux:

3.21.10
3.22.8
3.23.8
3.24.4

- A security fix in apk-tools 3.0.9 and 2.14.13 to prevent crashing on certain malformed data.

https://alpinelinux.org/posts/alpine-3.21.10-3.22.8-3.23.8-3.24.4-released/

#AlpineLinux #security

@cR0w I get that it's a meme, but the Alpine folks have done an awesome job of dealing with this despite it not being their fault whatsoever. The OpenSSH/OpenBSD folks have been more of a mixed bag...

@karolherbst (it's not a musl vuln)

New kindle screensaver :)

So, Novell Netware 5 is an absolutely cursed operating system. As far as I can tell, it boots Caldera DOS as a stage-0, then goes into NWSERVER kernel that uses its own everything, and from there boots a JAVA shell, and from there there's an init also presumably in Java, that starts binaries for X-for-NW, IceWM-for-NW and, if I were to believe Novell's docs, a Java-based desktop. It definitely looks and feels like Java.

Java OS that I did not know existed

Wow, Google, wow. You're determined to burn off what goodwill you have left in the world, aren't you?

https://futurism.com/future-society/google-search-engine-access-schools-ban-ai

Resolved Issues in mBoot for macOS 27.3 beta:
“Fixed: Only a single core is available when you boot Linux or other third-party operating systems from a custom raw boot object on Mac computers with M5 Pro, M5 Max, and M5 Ultra chips. (182898702) (FB23916610)”
https://developer.apple.com/documentation/macos-release-notes/macos-27_3-release-notes#Resolved-Issues

PSA: The PSF has become aware of a website advertising a "PyConf2026" event in San Francisco. This event appears to be a fake, and we advise community members to use caution.

We're also following steps as recommended by our trademark lawyer, and we have filed a report with the ticket platform.

NGL, I'm kind of glad some game studios are still out there making their own engines. I don't actually believe that every game should be written in Unreal or Unity.

Every time I play an Unreal game, I can tell it's an Unreal game. Sure, they have really great systems for allowing developers to come up with all sorts of unique battle mechanics or clever world navigation mechanics like the wall jumps in Jedi: Fallen Order. But everything else about how you interact with the world in an unreal game feels scripted.

The two biggest culprets are opening chests/doors and squeezing through tight passages. I can literally tell if it's UE5, Frostbite, or something else based on nothing but the "press X" icon and how it interacts. It's good to have standard things that game devs can just drop into their games but, after a while, it makes the world feel unnaturally limited and that's never what you want.

Give me parkour! Give me a grapple hook that lets me pull myself up onto a robot bird! Give me Skyrim's "you can walk on anything but it might not end well"! Give me Zelda's "no, seriously, you can climb anything, just not in the rain". Give me a table I can knock over and all the stuff on it falls on the floor. Those are the kinds of things that make the world feel limitless and give you the illusion that you can go anywhere and do anything. And every one of those examples was from a game with a custom engine.

It's not that technical limits are bad. Every engine has them. It's just annoying to see the same technical limits in game after game after game.

And then there's lighting. There's a particular way in which UE5's dynamic lighting fucks up when you walk from light into shadow. Again, not a deal breaker in any one game. But every time I see it, I give a little sigh and go, "Right... Unreal..."

But please don't anyone take this as a UE hate post. It really isn't. It's a love letter to the people out there still building custom engines when most of the industry is yelling at them telling them it's pointless. Users notice. We really do.

why are cyber security news article always like

"HACKERS GOT ACCESS TO / BROKE THE / HAS STOLEN THE [xyz]"

and never like

"company with severe skill issues got their public shared folder of private info surprise-backupped because their IT department consists of someone hitting 'approve' buttons until something either works or stops working"

every protocol you rely on was argued about on a mailing list by people who will never be thanked

holy f*ck, Opus 5.5 JUST REPLACED MY CAT

i told it "meow for me"

and it said

"meow"

no hesistation, no food bowl required. my mind = blown.

This is just the beginning.

I'm slightly nervous about the US mid term elections. 🇺🇸

#USpol #midterms2026 #eupolicy

Dear #lazyweb does anyone know where to get the "REMEMBER to turn your computer off before 03:14:07 on 1/19/2038." Stickers?

There are some sites that carry them but I can't work out the original artist and I'd prefer to buy from them.

#retrocomputing

Hi, if you have not done the KDE desktop icon system survey yet, please do so <3 I will be writing blogpost this friday about all the data, and then I will start planning to get rid of these bugs for once and for all!

https://survey.kde.org/355778

#KDE #Plasma #Linux