Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
  • Arthur Besse@lemmy.mlEnglish
    7·
    3 days ago

    on the one hand:

    Nelson Muntz "ha, ha" meme

    on the other hand:

    everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc:

    locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c

    😱

    (and then locate certifi/__init__.py|xargs grep ^__version__ to see where they all are)

    • eldavi@lemmy.mlEnglish
      2·
      3 days ago

      😱😱 😱 😱 😱 😱 😱

      i’m so glad i don’t have to do security at my new workplace rn. :p

  • davel@lemmy.mlEnglish
    5·
    3 days ago

    Fortunately Homebrew’s git comes before Apple’s in my $PATH.