Hacker News Reader

The musl vulnerability looks a lot like an intentional backdoor, doesn’t it?

Choosing * instead of NULL is indeed very fishy coincidence. Of all the return values they could've picked... What are the odds?

Also the coincidence of 3 weeks later adding "oh, no passwords above 256 chars" making it easy to trigger

About 1 in 256 I'd reckon