4
Apple's git still trusts the compromised eMudhra certificates (emudhra.we-have-a-problem.com)
submitted 1 week ago by [B] to c/lobsters@lemmy.bestiver.se
comment fedilink hide all child comments
 

Comments

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
5 comments in c/security@lemmy.ml view that post
[–] 5 points 1 week ago (2 children)

on the one hand:

Nelson Muntz "ha, ha" meme

on the other hand:everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc:

locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c

😱

(and then locate certifi/__init__.py|xargs grep ^__version__ to see where they all are)

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 4 points 1 week ago

    holy shit that's bad.

  • permalink
  • fedilink
  • source
    •
    [–] 3 points 1 week ago

    Fortunately Homebrew’s git comes before Apple’s in my $PATH.

  • permalink
  • fedilink
  • source
    •
    2 comments in c/tech@piefed.world view that post
    [–] 2 points 1 week ago

    Because of course it does

  • permalink
  • fedilink
  • source
    •
    [–] -1 points 1 week ago

    Have they done their own in house testing against the certs? If they come up clean...

  • permalink
  • fedilink
  • source
    •