Update your stuff, folks. I’ve had a fun day at work.

    • ffhein@lemmy.world
      link
      fedilink
      English
      arrow-up
      14
      ·
      6 hours ago

      I wonder if they didn’t read this section:

      There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.

      or if they did read it, but don’t trust it.

    • CompactFlax@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      17
      ·
      edit-2
      7 hours ago

      Jfc it’s patched in just about all of them now.

      Unless for some reason they’ve overridden that capability while being unable to issue patches in a timely manner due to process overhead, but nobody would be that stupid right?