ZeroCool@piefed.ca to Technology@lemmy.zipEnglish · 8 days agoThe Internet goes on high alert after discovery of 8 compromised TLS certsarstechnica.comexternal-linkmessage-square3linkfedilinkarrow-up143arrow-down11 cross-posted to: security@lemmy.mlcybersecurity@sh.itjust.workstechnology@beehaw.orgtechnology@lemmy.worldtechnology@midwest.socialprivacy@lemmy.mllinux@lemmy.mltechnology@lemmy.ml
arrow-up142arrow-down1external-linkThe Internet goes on high alert after discovery of 8 compromised TLS certsarstechnica.comZeroCool@piefed.ca to Technology@lemmy.zipEnglish · 8 days agomessage-square3linkfedilink cross-posted to: security@lemmy.mlcybersecurity@sh.itjust.workstechnology@beehaw.orgtechnology@lemmy.worldtechnology@midwest.socialprivacy@lemmy.mllinux@lemmy.mltechnology@lemmy.ml
minus-squarejohntwinkletits@fedinsfw.applinkfedilinkEnglisharrow-up2·7 days agoAh yes, the programming languages blocked the certificates
minus-squareanewfox@lemmy.ziplinkfedilinkEnglisharrow-up2·7 days agoalmost certainly means their package managers won’t download dependencies over https using those certs. in fact, there’s a link right there in the article with a list, and sure enough it’s package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909
Ah yes, the programming languages blocked the certificates
almost certainly means their package managers won’t download dependencies over https using those certs.
in fact, there’s a link right there in the article with a list, and sure enough it’s package managers like pip as well as libraries like rustls-webpki: https://ifin.network/t/emudhra-intermediate-certificates-compromised/909