Home | Notifications | New Note | Local | Federated | Search | Logout

yossarian@yossarian@infosec.exchange

open source interloper; attracts bugs easily

אַ ביסל ייִדיש־פּאָסטינג

website: https://yossarian.net
blog: https://blog.yossarian.net
github: https://github.com/woodruffw
bluesky: https://bsky.app/profile/yossarian.net
OID: 1.3.6.1.4.1.55738
Joined: 2026-10-28 19:27:28
1 notes, 0 following, 0 followers

yossarian@yossarian@infosec.exchange (2026-10-28 14:09:39)
GitHub's macOS runners are unfortunately still vulnerable to the eMudhra CA compromise, meaning that any TLS traffic that goes through the system Git, curl, etc. is MITMable.

(success in the CI matrix below means the runner made a TLS connection that it absolutely should not have.)
---Attachments---
image: https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/516/803/602/417/463/original/94fd4442e176a1c0.png