Post by @mhoye@cosocial.ca

mhoye but seasonally spooky
@mhoye @cosocial.ca
Public en edited

Apple's command-line utilities are still exposed to the recent eMudhra weak certificate problem, and will be until a pending software update.

MacOS command-line utilities do use the OS-built-in certificate store, but they (curl, git, python, pip, ruby, bunch of others including openssl, alarmingly) are not built to know about Apple's revocation lists.

So, something to have on the, ahem, radar. More somewhat unsatisfying information here: support.apple.com/en-us/149555

Replying to @mhoye@cosocial.ca
mhoye but seasonally spooky
@mhoye @cosocial.ca
Public en edited

"If you want to address this before the software update, one option is [a bucket of awk pipe sudo, a flurry of brackets of every kind ]" is ... extremely out of character for Apple, so much so that I'm wondering if they're somehow caught in the middle of some larger process failure. They're not even bundling that up into something signed you can download and click?

Replying to @mhoye@cosocial.ca
Daniel Howard 🌻
@dannyman @sfba.social

@mhoye like bundling up something dubious into curl | sudo bash like a modern development house?

Replying to @dannyman@sfba.social

@dannyman Small mercies but their proposed remedies all modify files carefully and in-situ, and aren't making the mistake I see an _awful lot_ of people making, of throwing dice trying to secure their connections by pulling in changes over unsecured connections.

Replying to @mhoye@cosocial.ca

Um. So, I didn't realize this until just now but the first line of my /etc/ssl/cert.pem file on up-to-date-as-of-right-now MacOS reads

# $OpenBSD: cert.pem,v 1.22.2.1 2021/09/30 18:28:20 deraadt Exp $

_2021_

I know the pandemic and ongoing global fuckery have made everything kind of a blur but has _literally nothing bad_ happened between 2021 and last week as far as SSL is concerned?

Replying to @mhoye@cosocial.ca

I wonder if Cassandra ever said, please, I would like to stop Speaking With The Force Of Prophecy, I would just like my silly jokes to stay silly jokes and not Summon Whatever This Is Into Being, I am just trying to live my life, could I just Do That for a few weeks, and heard Zeus or Athena or whoever answering haha lol no, lmao.

cosocial.ca/@mhoye/11732036626

Replying to @mhoye@cosocial.ca

Me frantically looking through the dumb jokes I made a month ago to see what I’ve cursed the world with next week.

Replying to @mhoye@cosocial.ca
mhoye but seasonally spooky
@mhoye @cosocial.ca
Public en edited
A stack of book on a table, including Cat Hicks' Psychology Of Software Teams, Deb Chachra's How Infrastructure Works, Zalewski's The Secret Life Of Circuits, Weick & Sutcliffe's Managing The Unexpected and John Scalzi's Starter Villain.
A stack of book on a table, including Cat Hicks' Psychology Of Software Teams, Deb Chachra's How Infrastructure Works, Zalewski's The Secret Life Of Circuits, Weick & Sutcliffe's Managing The Unexpected and John Scalzi's Starter Villain.

oh god, this is the stack on my table as I say this, so apparently I’ll be starting the supervillain phase of my life shortly

Replying to @mhoye@cosocial.ca
Sam Levine
@SRLevine @neuromatch.social

@mhoye But you're going to be a supervillain with a well run organization and happy subordinates thanks to getting teamwork right!

Replying to @mhoye@cosocial.ca
mhoye but seasonally spooky
@mhoye @cosocial.ca
Public en edited

Coincidentally at Costco where it turns out serial killer masks are not just on sale but therapeutic, what a fortuitous turn of events. All I need now is a theme song and maybe a cape.

Replying to @mhoye@cosocial.ca

@mhoye Phantom of the Olestra

Replying to @mhoye@cosocial.ca
Javier
@jerojasro @col.social
Replying to @mhoye@cosocial.ca
Emma Needs β˜•οΈ
@emma @orbital.horse

@mhoye I have three of those books, do I need a secret volcanic island lair or a cooperative?

Replying to @emma@orbital.horse

@emma We’ll talk.

Replying to @mhoye@cosocial.ca
Ben Zanin
@gnomon @mastodon.social

@mhoye "starting"

Replying to @mhoye@cosocial.ca

@mhoye@cosocial.ca I was going to tell you a time travel joke, but you didn't like it.

Replying to @mhoye@cosocial.ca
Schamschula
@schamschula @mastodon.social

@mhoye This a problem if you don't edit /etc/ssl/cert.pem and use Apple's cli tools. Folks using an up to date version of #macports have an updated local cert.pem file if they install any network aware port, e.g. curl.

Replying to @mhoye@cosocial.ca
emilianosandri
@emilianosandri @mastodon.bsd.cafe

@mhoye When an issue impacts macOS command line utils the OS structure makes very frustrating to work it out.
Two years ago I wanted to replace the built-in ssh program to have a version compatible with my Yubikey but when I saw the work involved I ultimately gave up and opted for issuing a mac only private key and copy it to my servers.

@emilianosandri Yeah. The command line has been a second class citizen of the Mac since the inception of OSX.

Replying to @mhoye@cosocial.ca
emilianosandri
@emilianosandri @mastodon.bsd.cafe

@mhoye Before OSX there wasn't a command line at all and earlier OSX respected Unix conventions to the point they got UNIX certified multiple times... only in later years they started to stray away for example moving home directories from /home to /Users