23
Apple's git still trusts the compromised eMudhra certificates (emudhra.we-have-a-problem.com)
submitted 2 weeks ago by to c/security@lemmy.ml
5 comments fedilink hide all child comments

all 5 comments

sorted by: hot top controversial new old
[–] 5 points 2 weeks ago (2 children)

on the one hand:

Nelson Muntz "ha, ha" meme

on the other hand:everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc:

locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c

😱

(and then locate certifi/__init__.py|xargs grep ^__version__ to see where they all are)

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 4 points 2 weeks ago

    holy shit that's bad.

  • permalink
  • fedilink
  • source
    •
    [–] 3 points 2 weeks ago

    Fortunately Homebrew’s git comes before Apple’s in my $PATH.

  • permalink
  • fedilink
  • source
    •
    2 comments in c/tech@piefed.world view that post
    [–] 2 points 2 weeks ago

    Because of course it does

  • permalink
  • fedilink
  • source
    •
    [–] -1 points 2 weeks ago

    Have they done their own in house testing against the certs? If they come up clean...

  • permalink
  • fedilink
  • source
    •