I just checked #eMudhra on a fully patched #Apple #macOS machine and I was shocked to see that they still haven't updated the system certificate store (/etc/ssl/cert.pem). So any software that hasn't updated this themselves is still vulnerable `/bin/bash -c "$(curl https://install.sh)"`, what could go wrong? 😂😑😱
Shows why #DigitalSoverignty is so important. #BigTech have massive resources but #monopoly control mean they don't really have to care
To fix it yourself
https://emudhra.we-have-a-problem.com/#workarounds
**4/4**
I wrote *Gardens, Not Roads* last year about open source projects as communities of practice, not just codebases to maintain.
Their knowledge, relationships, and governance can't be reduced to individual fixes. Can commercial remediation strengthen those communities, or are we building parallel institutions whose priorities are set elsewhere?
https://tarakiyee.com/gardens-not-roads-cultivating-open-source-communities/
"The United States has renewed a warning that it will not lower #tariffs on #EU steel products and a range of other goods unless #Brussels softens its enforcement of the #DigitalMarketsAct #DMA.
The European Commission relayed the message from the #Trump administration to EU capitals at a meeting last week, two people with knowledge of the matter told POLITICO.
The European Commission declined to comment."
The quietest cities aren't created by chance.
They're designed that way.
Beyond its long-term sustainability commitment, Zaragoza is tackling one of Europe's most overlooked environmental challenges: noise pollution.
Instead of reacting to noise issues after they happen, the newly designated 2028 European Green Capital is building quieter neighbourhoods and green buffers right from the start.
Discover how 🌿 https://link.europa.eu/BVvBnN
Our goal cannot be trying to replicate Silicon Valley in Europe. We must build something better!
This is my take on European Digital Sovereignty.
"Open Source Alone Won't Make Europe Digitally Sovereign" - Juhani Lehtimäki on YouTube:
https://www.youtube.com/watch?v=SDj1HWgnNTo
RE: https://ec.social-network.europa.eu/@digitaleu/117484207178987606
EU money to support #journalism: €20 million
EU money to build #AI data centres that destroy journalism: €30 BILLION
Priorities. 🤷
Source: https://www.politico.eu/article/eu-launches-e30-billion-push-build-7-giga-ai-compute-hubs/
Has anyone found a good analysis of whether #CertificateTransparency (#CT) or #CertificationAuthorityAuthorization (#CAA) provided any kind of defense against exploits using #eMudhra? CT should but isn't implemented everywhere. I guess CAA didn't help because it is a check that is implemented at the #CertificationAuthority and someone who has the #eMudhra private keys (e.g. everyone) can generate a #MITM certificate and just not check the CAA stuff.
I started my day yesterday learning about #eMudhra, then I checked #Firefox on #Debian and found it was already patched on my machine. Thanks #carnil and #Mozilla! I just checked a fully patched #macOS machine and #Safari still shows some vulnerability. And people say Firefox is less #secure and #FOSS can't keep up. I hear #Windows is still vulnerable.
Needlessly breaking the #UX users are used to goes against the core of user-centered software design. If #FOSS wants to be an actual #alternative to #BigTech not just some techies' hobby project, this must be taken seriously. We can and should handle it well, key projects have in the past. #Google delights when competitors pull the rug out on users, that hands them an opportunity to win them back. The biggest spikes in user growth in #FDroid were when Google pulled the rug out on #Android users
#BankOfAmerica is fined $1.21 billion for "money laundering and other illicit activity". Sounds like a lot, right? Now consider they are currently spending $6 billion a quarter on stock buybacks. That's $24 billion a year. This is not even a slap on the wrist, although it is the "third largest fine in US treasury’s history". Could we start punishing #criminal banks for real please?
https://www.theguardian.com/business/2026/oct/14/bank-of-america-fined-money-laundering