OpenSSH on Alpine accepts long passwords for passwordless accounts
OpenSSH on Alpine Linux accepts any password over 256 characters for accounts with no password set, letting remote attackers log in as key-only users or Alpine's default cloud user. — sshhole.com
Discord moves desktop app to Rust
Discord is moving its desktop app to Rust, replacing the Electron framework that currently powers it. An early Windows build uses just 290MB of RAM, far below the current app's typical usage. — theverge.com
Alpine releases OpenSSH password-bypass fix
OpenSSH 10.6p2 closes an Alpine SSH bypass in which a very long password logs in to accounts with no password set. Alpine has published patched packages for every affected release branch, and administrators must restart the SSH service after upgrading. — alpinelinux.org
Self-hosted archive preserves YouTube favorites
A self-hosted media library pulls favorite YouTube playlists into local storage. Re-encoding the videos with Tdarr cut about 700GB from the author's server. — criminallyvulgar.dev
Servo ships new web platform features
Servo 0.7.0 brings web styling and page-structure additions, security fixes from an upgraded JavaScript engine, and stronger 3D-graphics compatibility. — servo.org