Kevin Jones

Worth knowing from Apple's 149555 note: a macOS update can put Apple's copy of cert.pem back. Anyone who removed those roots by hand should rerun the step 4 check after installing 27.2.

If anyone was wondering, no, macOS 27.2 update today does not appear to remove "emSign ECC Root CA - G3" and "AAA Certificate Services" roots from /etc/ssl/cert.pem. If I had to guess 27.2 was "done" several days ago.

I continue to be happy with the most unpopular iPhone ever released. mastodon.social/@marcoarment...

.NET patches are available for CVE-2026-111497 - the Brotli decompression vulnerability. devblogs.microsoft.com/dotnet/dotne...

A fun thing I’ve had a couple of times from “lying” to models: depending on the task, if it figures out you lied to it, more than once I’ve had a model try to delete all evidence it was doing something that it originally said it was not going to do.

I’m there!

Is this going to be one of “those” #Caps seasons?

My kid’s puzzle board leaked the EC private key for the emsign intermediates month ago.

We need to turn Spectre into an RFC protocol.

1. This is very tempting. 2. How long until TVs start locking down the ADB port.

Putting aside the “access” problem, medicine, vaccines, care.

TIL a lot of people judge an egg’s quality by yolk color (orange > yellow) but the color is mostly just a product of what the chicken is fed. Like, farmers are feeding hens paprika and carotenoids now for orange yolks.

@blowdart.me if I have to see this image so do you.

turns out eMudhra - which just got out of the cert business altogether - isn't just a problem for Indian customers; the G3 root that signed the dodgy keys, that Firefox already distrusts, that Google will distrust on the 27th is what a bunch of US university certs chain up to

The amount of misinformation about the eMudhra cert situation and its impact is depressing. The impact is real, significant, and important yet some people are out there still just Making Shit Up.

@xkcd.com must have a pretty good signal on “Today someone did something cryptographically dumb” based on traffic to the random dice rolling 4 comic.

*sad clown noises*

D

test site from @filippo.abyssdomain.expert (correctly CT logged to avoid false errors): g3.emsign.filippo.io

And here’s why. Full subordinate CA private keys leaked. blog.mozilla.org/security/202...

Kid’s preschool just sent out an AI slop flier to raise money for art supplies.

Many thanks @letsencrypt.bsky.social for the T-shirt!

It's time to drop support for Windows PowerShell, and move to PowerShell 7. Yes, even if it doesn't yet ship in-box with Windows Server. Just install it by default - you can still use WinRM, no need to switch to SSH. .NET Framework is *ancient* and lacks a decade of improvements

I think this is still one of ATProto / Bluesky’s superpowers. It’s API is open, it has to be! X closed* theirs and so many cool ideas, apps, etc. closed with it. *Unless you have a giant pile of money

I have never seen it in the wild until today but this dude in the coffee shop brought what amounts to my entire workspace of computer shit with him. Laptop, portable external monitor, a mouse, the works. Obnoxiously, using two tables for all his shit.

Maybe Claude can do Kryptos’s 4th passage next.

> NIST elliptic curve cryptography, which I would now personally recommend over Curve25519/Ed25519/X25519. Fascinating

Is anyone else obsessed with ginger, just because it tastes good? Like “gnaw on ginger root”?

I think this is a really good example of how “personal-use” things AI can be extremely good at and, without it, probably wouldn’t exist otherwise. Creating hyper-tailored things for super specific purposes is feasible now.

No one wants too much phthalate in their coin purse.

That Caps game kinda sucked but I guess the Habs sucked more.

Passkeys are not a Trap by @scotthelme.bsky.social scotthelme.co.uk/passkeys-are...