Josh reposted
Josh
Josh
@oracularhades.com
he/him my code is in your bluesky app, big atproto fan, posts are mine. working on the Aotearoa NZ feed as i can https://bsky.app/profile/did:plc:wtdzzfgzjpirnk5wvpjutqoy/feed/aaalback5hldm
1.8K followers599 following1.3K posts
Josh reposted
.NET has released an out of band security update to address the vulnerability in the Google Brotli library. This is the same library NPM and others use. .NET and ASP.NET Core do not use Brotli by default, you have to opt-in. Details on what to look for in your code are in the advisory.
Josh reposted
The PHP Foundation, which coordinated fixes for two critical PHP flaws, operates on a shoestring budget with one full-time staff member and 14 contractors (Toby Sterling/Reuters) Main Link | Techmeme Permalink
Josh reposted
Josh reposted
Josh reposted
Holy cow, this seems like a complete victory to me. Can't wait to see how this plays out!
Josh reposted
Josh reposted
Josh reposted
The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.
If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.
thankfully someone has some sense, this is awesome news :) www.stuff.co.nz/nz-news/3610...
Josh reposted
Josh reposted
If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.
🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.
@jcsalterego.bsky.social pleased to report a gym TV in NZ was watching the Red Sox game
Josh reposted
Josh reposted
Josh reposted
Replying to @merill.net
So I'm planning on shutting down the labeler and the bluesky.ms site. I have about 7 folks sponsoring the annual $10 contribution and I'll be reaching out to them to cancel. If anyone wants to take over and run the service please let me know. 2/2
Josh reposted
Josh reposted
Dad Walking Fine Line Between Teasing Kids & Giving Them Long Term Problems https://loom.ly/GhI_43A
Josh reposted
Josh reposted
Josh reposted
Josh reposted
Josh reposted
But how else is Bill Gates’s daughter going to make money?
A man-in-the-browser (MITB) attack compromises your browser to steal or alter transactions. Malware can change payment details before submission, then rewrite the receipt so everything looks correct. HTTPS cannot protect you from a compromised browser. #CyberSecurity #SecurityPlus
Josh reposted
Josh reposted
Josh reposted
Josh reposted