⬇ Download holy card: ·
⚔ Commemorated today: The Scourge of Change Healthcare (2024)⚔ Commemorated today: The Great Bybit Heist (2025)Saint Talkative Marmot
Patron of forgotten management interfaces, accounts without passwords, and names chosen by a bot.
Life
In June 2021 Miles Sutcliffe, looking for something else entirely, noticed that on some Arista EOS switches with the gNMI interface enabled you could log in to a local account set up with no password by typing any password at all. Arista published the advisory in January 2022 as CVE-2021-28500; on 21 February 2022 Sutcliffe wrote up his first vulnerability. The name was picked by @vulnonym, a bot that christens CVEs at random: he found it perfect.
Prayer
O Saint Talkative Marmot, who chats with whoever calls, teach our switches to ask for a real password. Amen.
How to celebrate
Celebrated by updating EOS, deleting nopassword accounts, and waking whoever is asleep in the NOC on Groundhog Day.
When the marmot talks, winter walks in.