← Back to context

Comment by tonnydourado

2 days ago

And ssh? I'd assume most would use proprietary or industry-specific standard for data IO, or just https, for domestic IoT stuff

8 comments

tonnydourado

Reply
andix  2 days ago

And also ssh in many cases.

  • pera  2 days ago

    I thought Dropbear was pretty much the defacto SSH server for embedded applications, is OpenSSH+musl actually a common combination for these scenarios?

    • andix  1 day ago

      Some use Dropbear, some use openssh.

      This vulnerability clearly is not one that affects everyone like the PHP vulnerability did. But it's exposure is still significant and very easy to exploit. As easy as it gets.