search

hackerschoice / segfault

345 stars 38 forks source link

SSH password to be used as SECRET if valid #84

Open SkyperTHC opened 1 year ago

SkyperTHC commented 1 year ago

This would remove the need for secret@ login.

  1. check if password is of length 24
  2. hash(password) (or use LID name) and lookup if root server exists. If so allow login.

There is no security concerns here that root@ has multiple passwords set. Needs patching of SSHD.