Many DKIM setups used cryptographic keys vulnerable to the 2008 Debian OpenSSL Bug (CVE-2008-0166) in 2024.
    • @[email protected]OP
      13•7 months ago

      Thats how they supposedly do this haha

      I suppose they have a very minimal webserver, hardened to the max and for sure not using docker

      • @[email protected]English
        13•7 months ago

        Oh I know it’s minimal effort to spin one up, especially for a static page. It’s just funny that that’s how this goes now.

        • @[email protected]OP
          20•7 months ago

          Its not, web dev is all about running 4 different Operating systems in containers, with huge dependency chains and slow loading javascript crap

          • @[email protected]English
            7•7 months ago

            As a web developer, I’d say I feel insulted by such a wild accusation, but then I’d be lying. 😅

          • @[email protected]
            3•6 months ago

            Plus downloading all your malicious software through unauth’d channels like npm, pip, cargo, docker hub, or github

        • lemmyvoreEnglish
          2•7 months ago

          …it doesn’t, you put static files on a CDN. Nobody in their right mind serves them from custom-made webservers (anymore). Those are intended exclusively for dynamic code (APIs for business logic, authentication, user actions, search etc.)