Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
  • Arthur Besse@lemmy.mlEnglish
    4·
    16 days ago

    on the one hand:

    Nelson Muntz "ha, ha" meme

    on the other hand:

    everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc:

    locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c

    😱

    (and then locate certifi/__init__.py|xargs grep ^__version__ to see where they all are)