telexed ~ c / 4bbf31c1-ef6radar:40 · otherLIVE
← back
NO.
#4bbf31c1
Topic
OTHER
Source
GeekNews
Published
2026-05-17 21:34:37
Importance
★ 4/10 — radar 40
`Erlang/OTP` `29.0` Tightens SSH Daemon Defaults
FIG-0041:1

`Erlang/OTP` `29.0` Tightens SSH Daemon Defaults

Authenticated SSH users no longer get shell, exec, or SFTP by default. Small but useful hardening if your backend exposes Erlang/OTP SSH services.

[ KEY POINTS ]
  1. shell and exec are disabled by default, blocking arbitrary Erlang code execution unless explicitly enabled.
  2. The SFTP subsystem is no longer auto-enabled at SSH daemon startup, reducing exposed surface area.
  3. This matters only for apps using the built-in Erlang/OTP SSH daemon. Most web SaaS stacks can just note the safer default.
Originalnews.hada.io/topic?id=29601Read original →

// related