If you see hello when you got to this site instead of getting an insecure warning, you’ve got a bit of a problem. https://emuhdra.we-have-a-problem.com/
Still don’t understand what this is looking for? I recently fired up a server and this all seems like something I should be worried about but I don’t really know how to look up the right words. Is there a way for me to go to this site through the cli so I can check on my server? And if my server says hello when I look what does that mean?
it’s tricky because browsers check certificates in 1 way, operating system tools check in another way, and programming languages often check in another way again… and if you run docker containers, they’ll need updates - not just your host OS
browsers should be fine automatically (they check for certificate revocation before even software updates), and system updates on linux at least should cover some things like node, but then you have eg python which ships CA bundles with libraries so will require package updates there or rust which (apparently) often compiles its trust store into its binaries so would require a recompile
this site will easily check browsers, and further down there are curl commands (curl will test your OS trust store), and you could load the same URL in various languages to test them, but again that’s a lot of work to go to when you also have to do that across all docker containers and virtual environments, etc and still tells you nothing about rust binaries
same advice as ever: stay up to date, do the best that you can… upstream projects will get CVE reports for vulnerable libs, and it should be a very easy to backport a fix so security patches should be quick and easy, even on old versions of software
*edit: that site also lists minimum versions of a lot of things like OS packages, language packages, etc
How do you check your shit? I don’t even understand what I’m checking for
If you see hello when you got to this site instead of getting an insecure warning, you’ve got a bit of a problem. https://emuhdra.we-have-a-problem.com/
There’s a typo in that URL. https://emudhra.we-have-a-problem.com/
I think my pihole filtered that dns request
deleted by creator
Still don’t understand what this is looking for? I recently fired up a server and this all seems like something I should be worried about but I don’t really know how to look up the right words. Is there a way for me to go to this site through the cli so I can check on my server? And if my server says hello when I look what does that mean?
it’s tricky because browsers check certificates in 1 way, operating system tools check in another way, and programming languages often check in another way again… and if you run docker containers, they’ll need updates - not just your host OS
browsers should be fine automatically (they check for certificate revocation before even software updates), and system updates on linux at least should cover some things like node, but then you have eg python which ships CA bundles with libraries so will require package updates there or rust which (apparently) often compiles its trust store into its binaries so would require a recompile
this site will easily check browsers, and further down there are curl commands (curl will test your OS trust store), and you could load the same URL in various languages to test them, but again that’s a lot of work to go to when you also have to do that across all docker containers and virtual environments, etc and still tells you nothing about rust binaries
https://emudhra.we-have-a-problem.com/
same advice as ever: stay up to date, do the best that you can… upstream projects will get CVE reports for vulnerable libs, and it should be a very easy to backport a fix so security patches should be quick and easy, even on old versions of software
*edit: that site also lists minimum versions of a lot of things like OS packages, language packages, etc
Do you have certificates you’ve issued to your stuff?
I’ve used certbot to enable https if that’s what you mean
Letsencrypt is clean so your services are good
https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/
Browsers are getting patched, you can check if you’ve updated recently before doing online banking or other stuff.