Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Is it.
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Is it.
AI-generated research is testing the credibility of science
"It's absolutely flooding the scientific literature, and journals and publishers are struggling to keep up."
Quotes from Ivan Oransky, Michal Jojcik, and me.
Katharine Sorensen @thebeiruter.bsky.social
thebeiruter.com/article/ai-g...
"It's absolutely flooding the scientific literature, and journals and publishers are struggling to keep up."
Quotes from Ivan Oransky, Michal Jojcik, and me.
Katharine Sorensen @thebeiruter.bsky.social
thebeiruter.com/article/ai-g...
The Beiruter | AI-generated research is testing the credibility of science
AI is making scientific fraud easier to produce and harder to detect, amplifying longstanding problems with academic publishing incentives, research integrity, and public trust in science.
thebeiruter.com
November 6, 2026 at 11:56 AM
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Is it.
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Authentication
Is it.
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting certain Linux systems and includes several additional bug fixes.
linuxiac.com/openssh-10-6...
#OpenSSH #OpenSource #Linux
linuxiac.com/openssh-10-6...
#OpenSSH #OpenSource #Linux
OpenSSH 10.6p2 Released to Fix Critical Password Authentication Bypass
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting certain Linux systems and includes several additional bug fixes.
linuxiac.com
November 5, 2026 at 8:32 PM
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting certain Linux systems and includes several additional bug fixes.
linuxiac.com/openssh-10-6...
#OpenSSH #OpenSource #Linux
linuxiac.com/openssh-10-6...
#OpenSSH #OpenSource #Linux
Multi factor authentication 💜
November 4, 2026 at 9:29 PM
Multi factor authentication 💜
W Identity AB is a separate company with a separate purpose stated as development, sales and consulting in digital login security and authentication solutions. That describes a business selling authentication to others, not a support function for one social app.
November 7, 2026 at 7:40 AM
W Identity AB is a separate company with a separate purpose stated as development, sales and consulting in digital login security and authentication solutions. That describes a business selling authentication to others, not a support function for one social app.
This involves two different authentication apps
Logging into a remote desktop to log into a remote desktop to log into a final remote desktop to then launch a hosted app. I've only gotten the first 2 layers working and need to call tech support tomorrow.
One of the tools I use at work has 3 layers of remote desktop to access. Truly a cursed setup.
November 5, 2026 at 12:53 AM
This involves two different authentication apps
Omg I am so tired of double authentication on every login!!
November 6, 2026 at 9:14 PM
Omg I am so tired of double authentication on every login!!
Deep dive into wireless client authentication—from open/WEP to WPA3/SAE & 802.1x/EAP (LEAP, PEAP, EAP-TLS). Covers IEEE 802.11 & the shift from static keys to mutual authentication. #CyberSecurity #WirelessSecurity #WPA3 #IEEE80211
www.linkedin.com/pulse/wirele...
www.linkedin.com/pulse/wirele...
Wireless client authentication methods
This article has two main goals. First, this article introduces the IEEE 802.
www.linkedin.com
November 5, 2026 at 2:57 PM
Deep dive into wireless client authentication—from open/WEP to WPA3/SAE & 802.1x/EAP (LEAP, PEAP, EAP-TLS). Covers IEEE 802.11 & the shift from static keys to mutual authentication. #CyberSecurity #WirelessSecurity #WPA3 #IEEE80211
www.linkedin.com/pulse/wirele...
www.linkedin.com/pulse/wirele...
cesatluismenotti.bsky.social
This profile requires authentication to view.
cesatluismenotti.bsky.social
November 6, 2026 at 10:44 PM
Authentication needed.
November 6, 2026 at 12:09 PM
Authentication needed.
death to multifactor authentication
November 7, 2026 at 6:06 PM
death to multifactor authentication
change ya passwords and turn in 2fa! not having two factor authentication in 2026 is already crazy imo 😭
whats up with everyones bsky being hacked
November 6, 2026 at 10:30 PM
change ya passwords and turn in 2fa! not having two factor authentication in 2026 is already crazy imo 😭
Security advisory: openssh-server password authentication bypass | Alpine Linux
Alpine Linux
www.alpinelinux.org
November 5, 2026 at 4:57 PM
I have measured out my life in multi-factor authentication logins
November 2, 2026 at 6:38 PM
I have measured out my life in multi-factor authentication logins
Note that this exploit/bug requires allowing password authentication in SSH, which should be disabled and deprecated for ages now.
Of course there is the problem that some odd container image may not turn that off.
Of course there is the problem that some odd container image may not turn that off.
'PasswordAuthentication=no' should be default everywhere IMHO, I check this religiously on new installs.
It gets much harder to assure this across a huge fleet of container images. So if anything public facing is listening on port 22 or otherwise lets SSH in, check it.
It gets much harder to assure this across a huge fleet of container images. So if anything public facing is listening on port 22 or otherwise lets SSH in, check it.
OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.
openssh.com/releasenotes...
If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY.
openssh.com/releasenotes...
If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY.
November 5, 2026 at 1:51 PM
Note that this exploit/bug requires allowing password authentication in SSH, which should be disabled and deprecated for ages now.
Of course there is the problem that some odd container image may not turn that off.
Of course there is the problem that some odd container image may not turn that off.
Security advisory explains when its applicable.
alpinelinux.org/posts/2026-1...
alpinelinux.org/posts/2026-1...
Security advisory: openssh-server password authentication bypass | Alpine Linux
Alpine Linux
alpinelinux.org
November 6, 2026 at 9:12 AM
Security advisory explains when its applicable.
alpinelinux.org/posts/2026-1...
alpinelinux.org/posts/2026-1...
Poob now has mandatory two factor authentication
November 2, 2026 at 8:24 PM
Poob now has mandatory two factor authentication
It will all be taken down, fumigated, swept for bugs (electronic kind), Smudged several times, authentication done of all things that are part of the White House. Mar-O-Lago with a search warrant will be searched to make sure none of the White House paintings, furnishings, statues etc are there. 😁
November 6, 2026 at 8:41 AM
It will all be taken down, fumigated, swept for bugs (electronic kind), Smudged several times, authentication done of all things that are part of the White House. Mar-O-Lago with a search warrant will be searched to make sure none of the White House paintings, furnishings, statues etc are there. 😁
Lol, I was wondering if I haven't confused Authorization with Authentication in some places because I do confuse those, so I checked the spec… I guess I shouldn't worry 🫠
![Figure 5: Pushed Authorization Request to the OP
12.1.1.2.1. Processing the Pushed Authentication Request
The requirements specified in Section 12.1.1.1.2 also apply to Pushed Authorization Requests [RFC9126].](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:oio4hkxaop4ao4wz2pp3f4cr/bafkreid6n2n7tbn7ad5vu4spg4wnnwkpe6nezhm34ebduqqswoi75ierh4)
November 4, 2026 at 6:56 PM
Lol, I was wondering if I haven't confused Authorization with Authentication in some places because I do confuse those, so I checked the spec… I guess I shouldn't worry 🫠
Alpine Linux Security Advisory: OpenSSH-server password authentication bypass
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://news.ycombinator.com/item?id=50379704
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://news.ycombinator.com/item?id=50379704
Alpine Linux Security Advisory: OpenSSH-server password authentication bypass
Alpine Linux Security Advisory: OpenSSH-server password authentication bypass
alpinelinux.org
November 5, 2026 at 5:30 PM
Alpine Linux Security Advisory: OpenSSH-server password authentication bypass
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://news.ycombinator.com/item?id=50379704
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
https://news.ycombinator.com/item?id=50379704
For authentication, mint a JWT token with com.atproto.server.getServiceAuth and set:
aud: did:web:foryou.club
lxm: club.foryou.feed.getFeedSkeleton
Supported NSIDs are here: foryou.club/atmosphere/l...
aud: did:web:foryou.club
lxm: club.foryou.feed.getFeedSkeleton
Supported NSIDs are here: foryou.club/atmosphere/l...
November 5, 2026 at 2:16 AM
For authentication, mint a JWT token with com.atproto.server.getServiceAuth and set:
aud: did:web:foryou.club
lxm: club.foryou.feed.getFeedSkeleton
Supported NSIDs are here: foryou.club/atmosphere/l...
aud: did:web:foryou.club
lxm: club.foryou.feed.getFeedSkeleton
Supported NSIDs are here: foryou.club/atmosphere/l...
Security advisory: openssh-server password authentication bypass | Alpine Linux
Alpine Linux
alpinelinux.org
November 5, 2026 at 3:28 PM
🌊 ABYSSAL · critical with a public exploit
CVE-2026-19868: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate auth…
CVSS 7.5 · CISA KEV · 0day
https://vulnsea.com/cve/CVE-2026-19868
#CVE #infosec #cybersecurity #threatintel
CVE-2026-19868: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate auth…
CVSS 7.5 · CISA KEV · 0day
https://vulnsea.com/cve/CVE-2026-19868
#CVE #infosec #cybersecurity #threatintel
CVE-2026-19868 — An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enf…
vulnsea.com
November 7, 2026 at 5:38 AM
🌊 ABYSSAL · critical with a public exploit
CVE-2026-19868: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate auth…
CVSS 7.5 · CISA KEV · 0day
https://vulnsea.com/cve/CVE-2026-19868
#CVE #infosec #cybersecurity #threatintel
CVE-2026-19868: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate auth…
CVSS 7.5 · CISA KEV · 0day
https://vulnsea.com/cve/CVE-2026-19868
#CVE #infosec #cybersecurity #threatintel
Help Net Security - Article
"Ghostunnel: Open-source TLS proxy with mutual authentication"...
www.helpnetsecurity.com/2026/11/04/g...
==========================
#librecanada #linux #opensource
"Ghostunnel: Open-source TLS proxy with mutual authentication"...
www.helpnetsecurity.com/2026/11/04/g...
==========================
#librecanada #linux #opensource
Ghostunnel: Open-source TLS proxy with mutual authentication - Help Net Security
Ghostunnel TLS proxy adds mutual authentication in front of services that can’t speak TLS, with SPIFFE, OPA, and hot-reloading certificates.
www.helpnetsecurity.com
November 6, 2026 at 1:48 AM
Help Net Security - Article
"Ghostunnel: Open-source TLS proxy with mutual authentication"...
www.helpnetsecurity.com/2026/11/04/g...
==========================
#librecanada #linux #opensource
"Ghostunnel: Open-source TLS proxy with mutual authentication"...
www.helpnetsecurity.com/2026/11/04/g...
==========================
#librecanada #linux #opensource
🔐 OpenSSH 10.6p2 Released to Fix Critical Password Authentication Bypass linuxiac.com/openssh-10-6...
OpenSSH 10.6p2 Released to Fix Critical Password Authentication Bypass
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting certain Linux systems and includes several additional bug fixes.
linuxiac.com
November 7, 2026 at 10:15 AM
🔐 OpenSSH 10.6p2 Released to Fix Critical Password Authentication Bypass linuxiac.com/openssh-10-6...
I'm hoping that having SSH password authentication off prevents this entirely
November 5, 2026 at 7:12 PM
I'm hoping that having SSH password authentication off prevents this entirely