6 ms·

They had root account activated in hebe? Am i reading this right? He got an passlist of 5 million users?

• m_b 7y ago
  yeah
• saagarjha 7y ago
  Yup: https://github.com/matrix-org/matrix.org/issues/358 https://github.com/matrix-org/matrix.org/issues/358
• deleted 7y ago
  [deleted]
• beagle3 7y ago
  But even if they didn't, "sudo -u root /bin/bash" or similar gives it to you unless sudo is extremely locked down (which, from audits I have done, is "rarely if ever"). There are hundreds of ways to get root prompt even with the root account nominally deactivated.
  • deleted 7y ago
    [deleted]