• 0 Posts
  • 64 Comments
Joined 3 years ago
cake
Cake day: December 29th, 2023

help-circle









  • i’d be careful to infer a win from anything specific… republicans definitely lost, but imo if the democrats literally said nothing at all republicans would have lost. we can say for sure that republicans are hated right now; but im not sure democrats have americans enthused or just relieved (from my external perspective)



  • left is a direction: not a plan… some people will never be happy with tempered agreement. if you’re not giving full throated and unquestioning support you’re the enemy. if you have to think about it, you’re “stalling progress” and… what was the phrase? apparently barely having “2 brain cells to rub together”








  • it’s tricky because browsers check certificates in 1 way, operating system tools check in another way, and programming languages often check in another way again… and if you run docker containers, they’ll need updates - not just your host OS

    browsers should be fine automatically (they check for certificate revocation before even software updates), and system updates on linux at least should cover some things like node, but then you have eg python which ships CA bundles with libraries so will require package updates there or rust which (apparently) often compiles its trust store into its binaries so would require a recompile

    this site will easily check browsers, and further down there are curl commands (curl will test your OS trust store), and you could load the same URL in various languages to test them, but again that’s a lot of work to go to when you also have to do that across all docker containers and virtual environments, etc and still tells you nothing about rust binaries

    https://emudhra.we-have-a-problem.com/

    same advice as ever: stay up to date, do the best that you can… upstream projects will get CVE reports for vulnerable libs, and it should be a very easy to backport a fix so security patches should be quick and easy, even on old versions of software

    *edit: that site also lists minimum versions of a lot of things like OS packages, language packages, etc