Whats going on with PHP? Is there a twitter drama?

Can someone explain why IoT Devices are affected?

Because the S in IOT stands for Security.

IOT devices famously never get firmware updates, which means most of them will remain vulnerable to this leaked trust chain until the cert expires in 2039. That means you can forge an HTTPS server for any domain that an IOT device connects to and act as if you are the authoritative server. This means intercepting encrypted traffic and being able to decrypt it, or serving payloads to the device from a fake trusted server.

If your TV connects to whatever.lg.com, you can create a certificate for that domain using this intermediate signing cert, and pretend to be that server. That's how https://dv-g3b-emudhra.we-have-a-problem.com/ was created.

You can issue a certificate for hxxps://update-server.manufacturer.example or sign any update.zip files using that certificate. If the device requires a specific certificate and/or one under root/intermediate CA that is not eMudhra, e.g. "Manufacturer Product-division Root CA", then that device will not be affected.

Saved

Famously a much more laidback working environment

Well, what happened with your degree? Do you use it?

This is messy.. but Apple looks worse off here. They are running scared because Jony designed next-gen AI devices is going to blow up the iPhone business.

It’s been over a year since the cringe Sam and Jony photo op with nothing to show for. Apple has nothing worry about.

Haha

Couldn't they trace the thief through the eSIM?

Why are theee no legal repurcussions to this?

Possibly, there is a lot of KYC involved in setting up an eSIM virtual provider but the party that ordered the eSIMs may not be in the know, and the attacker may have obfuscated their credentials or used high quality fakes.

Conveniently, there is no KYC in acquiring a data-only eSIM. KYC is only enforced for the number which is not needed here.

I want to quit, and if the world were like it was 8 years ago with my current finances, I would have already taken the sabbatical I dream about.

As it stands, I'm raking in money and saving a fair amount of it, hesitant to make any big purchases or commitments that don't involve a barndominium and a farm, with quarters for close friends in a commune.

How are you raking in money?

I got hired as a consultant at a netsec company a few years ago whose stock is doing really well, and I get paid well for my region. Basically being experienced in my field of network security and being a good communicator, and generally likeable.

I'm not FIRE by any means. I could quit and live happily for a few years. But I'm have vanishing faith that I could get back into the field without a 50% paycut vs how things were five years ago.

I think more seriously now about buying a modest house, or buying land with water access and decent soil.

Lucky

If you plan to stay in tech.. but it's a great time to make alternative plans if you aren't committed to adapting to the changes the industry is going through. The day-to-day of tech work could be unrecognizable in 5-10 years

Nah, it's the best time (if you can). This is the time to spin up your own company/product and steal maximum marketshare from enshititech.

Shocked that this was downvoted.

Good luck when you need to prefill context..

Have you commercialized anything?