Apple's git still trusts the compromised eMudhra certificates (emudhra.we-have-a-problem.com)
from yogthos@lemmy.ml to security@lemmy.ml on 29 Oct 22:43
https://lemmy.ml/post/54666469

#security

threaded - newest

cypherpunks@lemmy.ml on 29 Oct 23:34 next collapse

on the one hand:

<img alt="Nelson Muntz “ha, ha” meme" src="https://lemmy.ml/pictrs/image/fe819d00-ea28-40c2-ba4a-a1cba62669ee.png">

on the other hand:

everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc: locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c # 😱 (and then locate certifi/__init__.py|xargs grep ^__version__ to see where they all are)

davel@lemmy.ml on 29 Oct 23:53 next collapse

In my case, mostly in Homebrew.

eldavi@lemmy.ml on 30 Oct 18:07 collapse

😱😱 😱 😱 😱 😱 😱

i’m so glad i don’t have to do security at my new workplace rn. :p

davel@lemmy.ml on 29 Oct 23:55 collapse

Fortunately Homebrew’s git comes before Apple’s in my $PATH.