Well, regardless of exploitability, this attitude just destroyed any confidence I had in VLC's updater being secure. Seriously, WTF. https://trac.videolan.org/vlc/ticket/21737 …
-
I like the hard-coded public key method myself too many leaked roots and software that doesn't even validate against stored chains
I mean I've implemented something like that myself, but at least I didn't use a 1024-bit DSA key, and this was on a system without an easily usable/configurable HTTPS client (at the time).
-
-
Yeah I hope they know more about memory handling
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.