❌

Normal view

There are new articles available, click to refresh the page.
Today β€” 6 November 2026Main stream

House G.O.P. Leaders Ask Nvidia’s Huang to Speak in Closed-Door Briefing

5 November 2026 at 23:39
The New York Times reported last week that Mr. Huang had a close relationship with an executive that U.S. officials determined was funneling information to Chinese intelligence.

Β© Manuel Orbegozo for The New York Times

The request for Jensen Huang, Nvidia’s chief executive, to speak represented a shift for Republican congressional leaders, who have largely taken a hands-off approach to the tech industry.

In Alaska, Ranked-Choice Ballots Are Unlikely to Be Enough for Dan Sullivan

An analysis shows Mary Peltola is likely to keep her lead in the Senate race in part because of ballots she’d accumulate in ranked-choice tabulation from supporters of the other Dan Sullivan.

Β© Erin Schaff/The New York Times

Voters in Alaska are able to rank the candidates. If no candidate receives more than 50 percent of the first-choice votes, the race advances to ranked-choice tabulation.

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

5 November 2026 at 23:09

Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into devices with no password.

The vulnerability exists in the interaction between OpenSSH, the code library implementing SSH connections, and musl, a lightweight alternative to the libc library that, unlike most other Linux distributions, is used in Alpine. Further, OpenSSH using musl (pronounced muscle) must not use PAM (pluggable authentication modules), a framework that handles user authentication and account-access checks. Alpine is a lightweight, widely used Linux distribution. Other platforms may be affected if they use the same configurations.

One connection, works every time, needs no retries

There are two other conditions necessary for successful exploitation. First, a system must have at least one user account that’s accessible using a password that is hashed using the SHA256 or SHA512 functions. Second, the target system account must be configured to be passwordless, by way of specifying a "*" in the password field in /etc/shadow, the Linux file where password hashes are stored. Passwordless accounts are commonly used for accounts that use certificate-based authentication. This setting is common for certain types of accounts.

Read full article

Comments

Β© Getty Images | Sergey Balakhnichev

❌
❌