any password longer than 256 characters is accepted for root on alpine, openwrt, buildroot, yocto, etc Since 2016!!! *sshole · sshhole.com
Discovered: Nov 12, 2026 14:52 (UTC) any password longer than 256 characters is accepted for root on alpine, openwrt, buildroot, yocto, etc Since 2016!!! *sshole · sshhole.com
QUOTE:
so openssh on musl linux (alpine, openwrt, buildroot, yocto, and a lot of the docker images you’ve pulled) has had a little problem since 2016.
accounts that should never take a password at all (root, your key-only deploy user, ldap users, the default user on alpine’s aws and azure images) take any password longer than 256 characters.