Insimwytim

Joined 7 months ago

Karma

478

Submissions

144

Member since

Mar 7

View on Hacker News

Recent submissions

Comment · 11 hours ago

I have committed a sin of starting with the comments without reading an article, assumed it was about reading and writing text by humans and was increasingly confused by your first paragraph.

I tried to translate it as metaphor at first, but it didn't end up being coherent.

Comment · 1 day ago

Criminal negligence is a thing.

Comment · 4 days ago

Maybe he had AI assist him with that comment

Comment · 10 days ago

  Most non-browser TLS clients (so basically everything else, with default settings), things like curl, Python, Node, Go, Java, git, package managers and every script and daemon you've got, do three things that matter here: they trust a CA bundle on disk, they don't check revocation by default, and they don't check CT. So the fact that eMudhra and Sectigo have revoked these intermediates doesn't help them at all. [1]

[1] https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-key... ( https://news.ycombinator.com/item?id=50177916 )

Comment · 10 days ago

> It wasn't even a problem with the most popular logging framework at the time.

I can't say if it was most popular overall, but it (Log4Shell) was a nightmare for many F500 companies.

Comment · 10 days ago

It's also weird that it seem to has overshadowed certificates incident, which, to me, appears to be of at least the same magnitude of impact.

Comment · 14 days ago

So, this site breaks, we know that much