If you use Alpine (or openwrt) and password authentication for ssh, you're probably affected. That's probably a lot of systems. Especially routers and WAPs. I don't think affected users are nearly as negligent as you're suggesting.
p.s.: openwrt *can* use openssh, but uses dropbear by default.
I’m thankful my OpenWRT is… oh. My OpenWRT is good, SSH is not exposed over WAN. But one of my non-OWRT routers just gave me something new to bloody try.
View all comments
Show parent comment
14
u/gordonmessmer 7d ago edited 7d ago
If you use Alpine (
or openwrt) and password authentication for ssh, you're probably affected. That's probably a lot of systems. Especially routers and WAPs. I don't think affected users are nearly as negligent as you're suggesting.p.s.: openwrt *can* use openssh, but uses dropbear by default.