SN 1104: The hole in OpenSSH - Password Bypass in Plain Sight

From hacked French refrigerators igniting fires to a massive OpenSSH authentication bug hiding in plain sight for a decade, this week's stories expose how lapses in basic security ripple into chaos—and why AI is now both a weapon and shield. TA surprising announcement regarding SpinRite. What is being "AI-pilled" and how does it happen. OpenAI just released GPT-6 Cyber. What does that mean. An irresponsible hacker published 30+ N-Able 0-days. 700 French refrigerators hacked. What's next. Lots of listener feedback about the Cloudflare tunneling solution, Voyager 1, true hardware drive encryption, the random number 4 and the amount of debris in orbit Then we look at a 10-year old serious SSH authentication bug (that's kinda wonderful) Show Notes - https://www.grc.com/sn/SN-1104-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: guardsquare.com trustedtech.team/twit originhq.com/securitynow joindeleteme.com/twit-biz