ZeroCool@piefed.ca to Technology@lemmy.zipEnglish · 1 day agoThe Internet goes on high alert after discovery of 8 compromised TLS certsarstechnica.comexternal-linkmessage-square3fedilinkarrow-up141arrow-down11 cross-posted to: cybersecurity@sh.itjust.workstechnology@lemmy.worldtechnology@lemmy.mllinux@lemmy.mllinux@programming.devprivacy@lemmy.mlpulse_of_truth@infosec.pubtechnology@piefed.social
arrow-up140arrow-down1external-linkThe Internet goes on high alert after discovery of 8 compromised TLS certsarstechnica.comZeroCool@piefed.ca to Technology@lemmy.zipEnglish · 1 day agomessage-square3fedilink cross-posted to: cybersecurity@sh.itjust.workstechnology@lemmy.worldtechnology@lemmy.mllinux@lemmy.mllinux@programming.devprivacy@lemmy.mlpulse_of_truth@infosec.pubtechnology@piefed.social
minus-squarejohntwinkletits@fedinsfw.applinkfedilinkEnglisharrow-up2·22 hours agoAh yes, the programming languages blocked the certificates
minus-squareanewfox@lemmy.ziplinkfedilinkEnglisharrow-up2·edit-222 hours agoalmost certainly means their package managers won’t download dependencies over https using those certs. in fact, there’s a link right there in the article with a list, and sure enough it’s package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909
Ah yes, the programming languages blocked the certificates
almost certainly means their package managers won’t download dependencies over https using those certs.
in fact, there’s a link right there in the article with a list, and sure enough it’s package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909