Well you can’t sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn’t strictly invalidate the already signed certs.

But I was more talking about the end-user certificates in the previous comment.

Because these are root certs which are still fine, it’s the intermediate certs that are compromised.

I still disabled eMudhra’s emSign G3 anyway, but that’s probably why Google hasn’t disabled the ones shown.

Yeah, my understanding was they’re not issuing new certificates, but the current ones are still valid until they’ve expired.

FYI, G3 is the only one listed with the issue, the others are fine AFAIK. But if you don’t trust eMudhra at all after that, then that’s fair.

Edit: Actually it’s the intermediate certs that are compromised, the roots are still fine, but many of them come from the G3 root cert (and Sectigo’s AAA Certificate Services)

Source: https://emudhra.we-have-a-problem.com/

Fluxer are also moving away from LiveKit, so hopefully that means it’ll require less ports soon.

Actually yeah you’re right. I reread the post and their point was it wasn’t easily exploitable, not that it wasn’t exploitable. Which makes sense when LiveOverflow wasn’t able to bypass ASLR.

LiveOverflow kinda debunked this

Some servers do publically list their PHP version, and as an example there are currently ~23,000 that list PHP 8.5.11: https://www.shodan.io/search?query=PHP%2F8.5.11

Sure these could be a manually patched version of 8.5.11, but I find that pretty unlikely.

They were proper 384bit certs, just the upper 376 bits were 0 in all the listed certs. So it’s different to setting the key size in OpenSSL, and they were most likely rolling their own crypto.

I remember hearing that alkaline batteries that contain mercury don’t leak, they’re just much worse for the environment. So maybe that’s what happened?

If you don’t mind using alternative DNS servers, meaning this won’t be accessible to the average person, you could try OpenNIC.

Unless there are vents underneath, you might also want to flip that power supply around, so the fan’s on top.

Yeah, although Cockpit is a web UI thing, while systemd pilot looks like a proper GTK app.