Lucas Werkmeister on Nostr: Now that https://www.openwall.com/lists/oss-security/2024/07/08/2 is public – ...

Now that https://www.openwall.com/lists/oss-security/2024/07/08/2 is public – presumably they already knew that

> the "LoginGraceTime 0" mitigation works against both issues, whereas the "-e" mitigation only works against CVE-2024-6387 and not (fully) against CVE-2024-6409.