allanfriedman.bsky.social
SBOM Champion. Paranoid about supply chains of all kinds. Former full-service technocrat at CISA, NTIA. Lapsed{engineer, academic, author}. Now wandering the world doing acts of infosec-goodness, & occasionally getting paid for it. Poster of food pics.
👤 Joined on 10 Mai 2023
Followers
Following
Total Posts
@allanfriedman.bsky.socialthis is disinfo. you have to neg gemini to get RCE
Show PostThe macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.
Show Post-Hacker hijacks 10% of Tor exit nodes -Second ransomware negotiator linked to ShinyHunters -Hacker leaks AfD internal data -Chinese crime ring hacks Staples -PHP RCE leaks online -Hacker plants malware in OVHCloud app P: risky.biz/RBNEWS623/ N: news.risky.biz/risky-bullet...
Show PostLike I would get body oils on my car's metal
Show Post