Comment by smnc
2 days ago
> The goal from an attacker’s perspective is to get this to be true: `$ret = crypt($pw, $hash); $ret == $hash` when called by OpenSSH’s sshd.
A typo: `$ret = crypt($pw, $salt)`
2 days ago
> The goal from an attacker’s perspective is to get this to be true: `$ret = crypt($pw, $hash); $ret == $hash` when called by OpenSSH’s sshd.
A typo: `$ret = crypt($pw, $salt)`
No comments yet
Contribute on Hacker News ↗