π¦https://nitter.cf/t.co/flqh0nQveA ~ PR'd player in Portugal for Smash Bros Ultimate ~ He who mains the 3 Mii Fighters ~ Banner by @Exopaz ~ Stereotypical Discord mod
Lisbon, Portugal.
Joined February 2009
- Tweets62.7K
- Following403
- Followers718
- Likes322K
Pinned Tweet
Put this together yesterday because I've been practicing/fighting a lot of people on #SmashBrosUltimate and I keep having to explain my #MiiFighter movesets.
I think the three images turned out alright. Haven't done graphical design in a bit, so I'm rather proud of the result!
πΉππππ π£π the Mii Guy retweeted
An OpenSSH bug that took 46 years to ripen!
1980
UNIX puts * in the password field of system accounts. The idea is simple: itβs not a real hash, so it canβt be brute-forced and you canβt log in with a password.
2012
The musl libc developers decide that returning NULL from crypt() on failure is dangerous - programs often forget to check it and crash with a segfault. So they return an error string instead.
Guess which one?
The same asterisk: *.
Three weeks later they add a length limit: passwords longer than 256 bytes burn CPU. Anything longer is rejected. And since itβs an error, crypt() returns *.
2016
OpenSSH fixes a timing attack (CVE-2016-6210). If a user doesnβt exist, the server still hashes the password with a fake/borrowed salt so an attacker canβt tell valid usernames by response time.
2022
Alpine Linux changes the locked root password in /etc/shadow from ! to * so SSH keys work properly on cloud images.
β¦ and the loop closes!
You connect over SSH as root (whose shadow entry is *).
You type any password longer than 256 characters (e.g. 300 As).
crypt() hits the length limit β returns * β OpenSSH compares it with the value in the database β that value is also * β youβre in as root.
That chain took 46 years (!!!) to complete.
Every individual change was reasonable. Together they produced a perfect * == * authentication bypass (CVE-2026-123158, nicknamed *sshole). Fixed in OpenSSH 10.6p2 and Alpine packages.
π¨ Critical OpenSSH flaw allows passwordless account access using any password over 256 characters
sshhole.com
A newly disclosed vulnerability dubbed *sshole has been discovered in OpenSSH installations using musl libc, potentially allowing attackers to bypass authentication and gain access to accounts that should reject password logins entirely.
The flaw affects certain configurations of Alpine Linux, OpenWrt, Buildroot, and Yocto where PAM is disabled and password authentication remains enabled. Under specific conditions, attackers can authenticate to locked accounts using arbitrary passwords between 257 and 1,024 characters.
The researcher demonstrated that affected Alpine Linux cloud images could allow attackers to gain root privileges through a passwordless administrative account.
OpenSSH 10.6p2 addresses the issue. Administrators are urged to update immediately or disable SSH password authentication until patches can be applied.
πΉππππ π£π the Mii Guy retweeted
UPDATE:
after being told to wait, i finally checked back in with @TeamYouTube only to be told my channel is terminated because of the violation.
the violation that no one has told me about. the violation of the policy that??? iβm unaware if i even broke? not to mention, the fact that they were responding so fast after taking HOURS/DAYS to respond to me before, and given their messages, itβs likely these are just automated responses. so after all that, iβm still just dealing with a bot.
their own policy states that i should have received an email to remove the content. but i didnt. their policy said they can terminate me for βrepeated violationsβ or a βsingle case of severe abuseβ but what could I have possibly posted that warranted that???
my content is mostly gameplay or talking, i read reddit stories every week (as do hundreds of other accounts), i literally spent the last few streams playing cozy games and reading winnie the pooh?????
im at a lossβ¦ im not a channel with hundreds of thousands of subscribersβ¦ i dont have a huge following but my editor and i have worked so hard on my channel, my community has been so kind and so sweet about my contentβ¦ and now im being told im being shut down for no reason. i dont even know how im supposed to access my other accounts that were connected to this one including my music channel where a cover had JUST hit 100K viewsβ¦
i never thought this would happen to me but here we are i suppose π
on oct 30th i got smacked with my youtube channel getting taken down for "severe/repeated violations of our sex and nudity policy"
... if so severe and if so repeated? why wouldn't you warn me? why is there no "hey just a heads up, don't do this, fix it or we'll take your channel down"
the appeal email came so fast it didn't even register in my inbox right. i got auto denied within the same day.
@TeamYouTube none of my links on youtube go to my nsfw content so what gives? i've never had a single issue on my channel, never given any sort of heads up that something was wrong with my channel.
funny enough, i JUST hit youtube partner this year AND the day before i got hit with this, i had JUST verified my address so i could be paid. i worked so hard this year on my youtube channel and now it's just wipedπ thanks a lot youtube
πΉππππ π£π the Mii Guy retweeted
We have to say βMississippiβ after each number
πΉππππ π£π the Mii Guy retweeted
@TeamYouTube You "deleted" my client's @pockettrash channel Friday. We had no warning and still don't have a clear reason. Now I'm getting UPDATES that old live stream VODs are being blocked but the channel is still gone, I can't check. Stop giving me false hope and plz answer us
πΉππππ π£π the Mii Guy retweeted
Remote code execution in MS Paint.
cve.org/CVERecord?id=CVE-202β¦
yup....
πΉππππ π£π the Mii Guy retweeted
The bug is like a joke.
On Alpine Linux, type 257 to 1024 characters of anything and you get root. π
βΌοΈ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
πΉππππ π£π the Mii Guy retweeted
people in Southern Italy can't buy food because diesel is too expensive for truckers to be able to get a living wage out of their job because you decided to start a pointless war in Iran
just one example off the top of my head
Youβre unable to view this Post because this account owner limits who can view their Posts. Learn more
πΉππππ π£π the Mii Guy retweeted
Google is now threatening America's schools, saying they will turn off their core search functions if schools choose to entirely block AI.
nytimes.com/2026/11/03/us/goβ¦
πΉππππ π£π the Mii Guy retweeted
i never thought this would happen to me but here we are i suppose π
on oct 30th i got smacked with my youtube channel getting taken down for "severe/repeated violations of our sex and nudity policy"
... if so severe and if so repeated? why wouldn't you warn me? why is there no "hey just a heads up, don't do this, fix it or we'll take your channel down"
the appeal email came so fast it didn't even register in my inbox right. i got auto denied within the same day.
@TeamYouTube none of my links on youtube go to my nsfw content so what gives? i've never had a single issue on my channel, never given any sort of heads up that something was wrong with my channel.
funny enough, i JUST hit youtube partner this year AND the day before i got hit with this, i had JUST verified my address so i could be paid. i worked so hard this year on my youtube channel and now it's just wipedπ thanks a lot youtube
