☆ Yσɠƚԋσʂ ☆@lemmy.ml to Security@lemmy.mlEnglish · 5 days agoApple's git still trusts the compromised eMudhra certificatesemudhra.we-have-a-problem.comexternal-linkmessage-square5linkfedilinkarrow-up125arrow-down10
arrow-up125arrow-down1external-linkApple's git still trusts the compromised eMudhra certificatesemudhra.we-have-a-problem.com☆ Yσɠƚԋσʂ ☆@lemmy.ml to Security@lemmy.mlEnglish · 5 days agomessage-square5linkfedilink
minus-squareArthur Besse@lemmy.mllinkfedilinkEnglisharrow-up7·5 days agoon the one hand: on the other hand: everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc: locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c 😱 (and then locate certifi/__init__.py|xargs grep ^__version__ to see where they all are)
minus-squareeldavi@lemmy.mllinkfedilinkEnglisharrow-up2·4 days ago😱😱 😱 😱 😱 😱 😱 i’m so glad i don’t have to do security at my new workplace rn. :p
on the one hand:
on the other hand:
everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc:
locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c😱
(and then
locate certifi/__init__.py|xargs grep ^__version__to see where they all are)😱😱 😱 😱 😱 😱 😱
i’m so glad i don’t have to do security at my new workplace rn. :p
In my case, mostly in Homebrew.