Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
It may affect a small fraction of their user base directly, but developers and other git users are high-value targets because a compromise there can often lead to supply chain compromise that will affect a much larger group of people.
This is true. I think the primary slowdown is just bureaucracy, aka procedures you have to follow before rolling out any software update to billions of users.
It may affect a small fraction of their user base directly, but developers and other git users are high-value targets because a compromise there can often lead to supply chain compromise that will affect a much larger group of people.
score 2 · canonical
Turns out a more effective way to access developer’s machines is just to hack Anthropic’s extensions and deploy them: https://lobste.rs/s/ttp7aq/backdoors_claude_code_for_vs_cursor
score 1 · canonical
This is true. I think the primary slowdown is just bureaucracy, aka procedures you have to follow before rolling out any software update to billions of users.
score 2 · canonical