OpenSSH shifts to faster releases as AI-discovered security bugs pile up
jedisct1 · x · 2026-10-07
- OpenSSH 10.6 ships with an unusual note: the team has received a flood of security reports generated by or with AI models, many lacking real-world impact, but welcomes reports backed by human triage, test cases, and fixes.
- Key insight: several AI-found bugs were later independently rediscovered by other researchers, implying unreported bugs are also findable by attackers. OpenSSH will therefore release fixes more frequently instead of batching them.
- Also: scp's -R remote-to-remote flag is being deprecated as fragile and risky.
More from Infra
- 21M model + 6.4B SSD-resident lookup table matches a 114M dense model — fechyyy · 2026-10-07
- Ollama 0.35 adds local decision models from Cloudflare, Together and Bespoke — Technovangelist · 2026-10-07
- CostGraph becomes a drop-in InfraCost replacement for comparing GPU prices from L40 to A100 — saheedniyi_02 · 2026-10-07
- Oki Home launches a $1,799 Memory Computer running a 27B model locally with up to 16TB Memchip storage — Scobleizer · 2026-10-07
- AveniatsHub runs Qwen3 and Gemma3 fully offline on Android — MiraMooreIloveLLM · 2026-10-07
- Phonon-2 hits 606x real-time on a MacBook Air: one hour of speech in 6 seconds — julianweisser · 2026-10-07