The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux

To test if impacted visit or curl this site: https://dv-g3b-emudhra.we-have-a-problem.com/

  • Lka1988@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 day ago

    Apple was notified of the eMudhra incident on 17th October. As of 28th October, the developer tools Apple ships with macOS, including git, curl and python3, still trust the compromised certificates.

    Lmao

    Meanwhile on Debian, famous for using older packages:

    $ git ls-remote https://git-emudhra.we-have-a-problem.com/check.git
    fatal: unable to access 'https://git-emudhra.we-have-a-problem.com/check.git/': server verification failed: certificate signer not trusted. (CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none)
    
    • Possibly linux@lemmy.zipOP
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      Debian pushes out security updates within hours when it is severe. Older packages doesnt mean unsupported