OpenSSH Vulnerability Discovered

farker haiku writes "Those of you who haven't heard of the metasploit project, it's an open source product for performing security audits. This time they've managed to find a remote buffer overflow in OpenSSH. Ya'll might want to read the link and then do whatever updating is necessary." It's unfortunate that something like this gets released today since nobody will bother to patch.

Comments

Re:Follow the standards!!!

[jrmcferren]

I grew up with kilobytes, megabytes and gigabytes being multiples of 1024. While kilohertz, megahertz, and gigahertz being multiples of 1000. I grew up during the '90s. Normally I would post this as AC, but it's April fools day so I will post it normally (might get an insightful).

Sites that don't do 4/1?

[Lord_Dweomer]

Taco,

On behalf of the huge number of us who chuckled after the first couple of stories and now want to vomit and find another temporary news site for today...Please, for the love of god, make an option on the front page so you can turn off the April Fools stories and actually get real news. You are a news site, and while it is great to take part in this holiday and have some laughs, there's still plenty of actual news occuring and it pisses a great many of us off that we now have to go to alternate sources to hunt for it. And while Digg has its fair share of 4/1 stories, it also still has real stories, so I will be directing my traffic there for the rest of the day.

I'd be really curious to see some Slashdot traffic numbers comparing March 31st, April 1st and April 2nd. Bet you would see a HUGE dip today right around the time people started to get real tired of the dumb lame posts. What amuses me is that the creative tags people have started giving these lame stories are often more amusing than the stories themselves.

dangerous

[arabagast]

Thinking about how common it is for an average slashdotter to RTFA, this could actually lead to people blindly jumping into their car and speeding away to "patch those boxxors". Nice one!
  I must admit from reading the title my heart missed a beat. Theres's gotta be something real on 1.april, no ?

Re:Insert Typical Slashbot April Fools Complaint

[rtaylor]

One hilarious April fools joke would have been to run Slashdot very professionally during this time. No spelling or factual errors, no dupes, article summaries that actually apply to the article, etc.

Once the 1st was over they could then return to their usual methods.

Just think of all the people that avoid the site during this time because of the way it operates during this time period.

Re:Beer sploit confirmed!

[nacturation]

The funny thing about it is that nobody would get fooled. "Hole in OpenSSH? Obviously an April Fools joke." Had it been an article about a new Sendmail exploit, people would be saying "Oh, crap... you had me there. That's just not funny! I thought I'd be spending all Saturday patching."