Update your stuff, folks. I’ve had a fun day at work.

    • ffhein@lemmy.world
      link
      fedilink
      English
      arrow-up
      21
      ·
      14 hours ago

      I wonder if they didn’t read this section:

      There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.

      or if they did read it, but don’t trust it.

    • CompactFlax@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      17
      ·
      15 hours ago

      Jfc it’s patched in just about all of them now.

      Unless for some reason they’ve overridden that capability while being unable to issue patches in a timely manner due to process overhead, but nobody would be that stupid right?