Filippo Valsorda :go: @filippo@abyssdomain.expert
Public

Looks like the same poorly implemented Android CT library that broke a lot of apps a couple years ago... did it again 🤦‍♂️

github.com/appmattus/certifica

Latest update for log_list.json includes a logs: [], which breaks the requirement here. However maybe we should be checking whether logs or tiled_logs is not empty instead?

June 21 update for log_list.json breaks the auto update · Issue #143 · appmattus/certificatetransparency

Latest update for log_list.json includes a logs: [], which breaks the requirement here. However maybe we should be checking whether logs or tiled_logs is not empty instead?

github.com · GitHub

Filippo Valsorda :go: @filippo@abyssdomain.expert
Public

Amongst other things, there's an open source software supply chain story here.

This Android library with 174 stars and one maintainer has taken down Monday.com, Eventbrite (!!!), UPS, Kraken, Lowe's, YBS, IKEA, Agibank, iFood, PagBank, pago.ro, and Udemy.

Again, this is the same failure mode that caused outages in 2023.

github.com/appmattus/certifica

Latest update for log_list.json includes a logs: [], which breaks the requirement here. However maybe we should be checking whether logs or tiled_logs is not empty instead?

June 21 update for log_list.json breaks the auto update · Issue #143 · appmattus/certificatetransparency

Latest update for log_list.json includes a logs: [], which breaks the requirement here. However maybe we should be checking whether logs or tiled_logs is not empty instead?

github.com · GitHub

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://abyssdomain.expert/users/filippo/statuses/114723318068853623 on your instance and quote it. (Note that quoting is not supported in Mastodon.)