thepudds
thepudds.bsky.social
Go contributor. Posts tend to be about #golang, performance, fuzzing, and Go Modules. He/him. https://github.com/thepudds
👤 Joined on 24 April 2023
1345
Followers
175
Following
208
Total Posts
📜 Kullanıcı Geçmişi
- 24 Nis 2023, 19:45
🎉 Bluesky'e katıldı - İlk kullanıcı adı:
@thepudds.bsky.social - 09 Kas 2023, 02:23
🔄 Profil bilgileri güncellendi
🚫 Blokladığı Kullanıcılar
❤️ Beğendiği Gönderiler
My mind has been fully boggled since ~yesterday afternoon and it's lovely to have the world catch up.
Show PostIf you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.
Show Post
🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.
Show PostTHIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10.
Show Post