wiki-user: Aatube
Now mostly on @Aatube@kbin.melroy.org . I use this account as a backup.
- 6 posts
- 5 comments
Joined 3 years ago
Cake day: June 18th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Impacted Versions: GitLab CE/EE: all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 —https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
4 daysnone of these intermediate CAs, including the one deployed in production, have issued any end-entity certificates. This has been confirmed through our internal analysis and corroborated by publicly available Certificate Transparency records on crt.sh.
—https://emudhra.com/en/post/certificate-security-incident
so no, there is no “traffic using the specific keys that leaked” and hence your attack wouldn’t yield anything, but one could use these certificates to reencrypt and impersonate
i’ll also note that you excluded the last sentence of the paragraph you quoted, which makes clear that “some cases” refers to cases other than the case at hand
Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.
exploiting compromised certificates requires an active adversary-in-the-middle attack, meaning the attacker must act as a proxy between two TLS parties and receive encrypted traffic, decrypt it, reencrypt it, and send it to the other party. Such capabilities, in some cases, are usually limited to only the most well-resourced attackers. People with control of a local network—at a coffee shop, university, or other organization—face much less of a challenge.
https://emudhra.we-have-a-problem.com/
three strangers searched for a tourist’s wedding ring in river rapids for three days / and found it
how much? everything always happens. what are your proportions here? and for how long? short-term, long-term? what is it you’d like to ask?
for one, by definition manipulation is to achieve an outcome with dishonesty, usually one relatively better than without in the short term. so if that’s what you mean …
- 13 days
- tried theraphy, the solution only dont think about it, its okay (if only it was that easy)
the usual response is to try a different therapist
this article that especially Apple fanboys, buy a new phone every year when the new one comes out
send
Last I heard, that was consistently 20% across Android and Apple.
Claim: [Wikipedia’s operators] has not hired a union-busting law firm.
Claim: The WMF has not hired a union-busting law firm.
whoops, did not see that