Lukasz Olejnik
@lukOlejnik
Security & Privacy. Data Protection. Research & Development. Engineering. Analyst. Policy. W3C. Consultant. Author. me@lukaszolejnik.com
Ph.D, LL.M. @warstudies
267 Following 32.4K Followers
Be careful when developing on macOS now. Apple did not yet revoke the vulnerable certificates, so /usr/bin/curl still trusts them because.
$ curl
Your client successfully connected to the site. That's bad!
Workaround:
mkdir -p ~/.config/certs
awk '/^(###|===) /{skip=0}
/^=== .*\/CN=(AAA Certificate Services|emSign ECC Root CA - G3)$/{skip=1}
!skip' /etc/ssl/cert.pem > ~/.config/certs/cert.pem
echo 'export CURL_CA_BUNDLE="$HOME/.config/certs/cert.pem"' >> ~/.zshrc
source ~/.zshrc
This only fixes curl. Update certifi, Go, pip/Python, Node, Docker images etc. separately.
Show more
An off-the-shelf VM is not enough to contain a modern, cyber-capable AI agent. AI agent escaped a VM three times. First via known bugs, then via missed patches, then it found 0-days and chained them. AI can hack, and agents can persist, research, adapt, and weaponize software flaws faster than patch cycles can handle it.
Show more
