DevDave

practically need to rotate logs every hour if you foolishly leave ssh open on a open network. usually a bastion with ssh listening to port 34000 or such is a good first step.

that said the conditions for this exploit are fascinating. no pam, shadow password set to *, using a alternative to glibc. The sacrifices to be more efficient feel on par with replacing a tank’s armor with paper mache and hope.

Does this include FEMA staff as well? My partner works for that agency and they’ve been bleeding staff for years now, can’t imagine getting dragged into this chaos not speeding that up.