Remember: when you run #curl shipped by Apple with the --cacert flag it won't behave like #curl does everywhere else. As I wrote about last year. I think they're doing it wrong. They think its fine.
daniel.haxx.se/blog/2024/03/08…
the Apple curl security incident 12604
tldr: Apple thinks it is fine. I do not. On December 28 2023, bugreport 12604 was filed in the curl issue tracker. We get a lot issues filed most days so this fact alone was hardly anything out of the ordinary.daniel.haxx.se
Maria Matejka
in reply to daniel:// stenberg:// • • •can't believe they swept it under the carpet this way
my actual thoughts all over this go like there must be some internal Apple tooling which once got broken by using this exact flag, and instead of fixing the tooling, they patched LibreSSL
daniel:// stenberg://
in reply to Maria Matejka • • •chris
in reply to daniel:// stenberg:// • • •Teixi
in reply to daniel:// stenberg:// • • •oh no! those bigcorps still abusing oss instead of facilitating and sponsoring it….
appl grotesque hypocrisy not being open to dialogue towards interoperability consensus…
yet windos still worse with obstruction by pirated alias names copying oss commands
curl asks for something like in ‘git for windos’ that package & install curl. But allows choosing openssl, or win sec channel?
Out of Control 🇨🇦
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Out of Control 🇨🇦 • • •Out of Control 🇨🇦
in reply to daniel:// stenberg:// • • •Tom Bortels
in reply to daniel:// stenberg:// • • •Thank you for sharing this here - I hadn't seen it. It's nice to have concrete reason for my shift off of the apple platform other than "they're being jerks".
(I've been de-emphasizing apple because I kinda believe I should be able to run what I want on my own computers and not be restricted by someone else's business model.)
Tom Bortels
in reply to daniel:// stenberg:// • • •Thank you for sharing this here - I hadn't seen it. It's nice to have concrete reason for my shift off of the apple platform other than "they're being jerks".
(I've been de-emphasizing apple because I kinda believe I should be able to run what I want on my own computers and not be restricted by someone else's business model.)