Sepuluh dari 30 Image Docker Populer Masih Memuat Root CA eMudhra yang Dicabut

·8 views

Browser seperti Chrome dan Firefox sudah mencabut kepercayaan pada root emSign ECC Root CA - G3 setelah insiden kunci lemah di delapan intermediate CA eMudhra. Namun, image container tidak ikut diperbarui secara otomatis, sehingga aplikasi di dalamnya bisa tetap menerima sertifikat dari root tersebut. Pemindaian terhadap 30 image Docker populer pada 24 Oktober 2026 menemukan 10 image yang masih membawa G3. Sebagian image yang tampak sudah diperbaiki juga ternyata masih menyimpan root yang dicabut, seperti salinan certifi milik pip atau cacerts milik Java. Para pengembang disarankan memeriksa seluruh trust store dalam image dan melakukan rebuild dengan --pull.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Project Brings 16-bit Windows Versions Back to 64-bit Windows

A GitHub project called winevdm enables 16-bit Windows software, including Windows 1.x, 2.x, 3.0, and 3.1, to run on 64-bit Windows systems. The source is a Hacker News post that drew a small amount of attention, with 4 points and one comment at the time it was listed. The article text provided is limited to the project link and discussion metadata, so details on implementation and compatibility are not included here. The tool addresses the fact that 64-bit Windows cannot natively execute 16-bit code. Interested readers can consult the linked repository for specifics.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Production PWA Lessons: Manifests, Workbox Caching, and Push Notifications

A DEV Community article argues that standard PWA tutorials stop short of what matters once real users install and rely on an app. It highlights manifest choices such as tagging start_url with a query parameter to track installs separately, and using properly padded maskable icons listed as separate entries. The piece recommends Workbox over hand-written service worker code, with a Laravel-oriented example that pairs NetworkFirst for pages, StaleWhileRevalidate for API data, and CacheFirst for images. It also addresses the problem of stale UIs after deployments, where an older service worker keeps controlling open tabs.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Structured Chatbot Search for Gaming Supplier Invoices Prioritizes Field Accuracy

A developer argues that a gaming company's chatbot for finding supplier invoices must return correct, specific fields rather than plausible-sounding answers. The proposed design pairs embedding-based semantic search to retrieve relevant invoice passages with a chat model that outputs schema-constrained JSON. Keeping retrieval and extraction separate makes it easier to tell whether errors come from finding the wrong evidence or mapping it wrongly. The article recommends preserving source identifiers, validating output, and marking absent fields as missing, and it proposes evaluating exact field accuracy on held-out invoices. It also compares OpenAI, Google Vertex AI, Cohere, Pinecone, and an OpenAI-compatible gateway by setup cost and fit.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Ten Tools to Catch Bugs in AI-Generated Code Before Merge

Lint, type checks and security scans often pass AI-written pull requests, leaving logic flaws, missing edge cases and breaks outside the diff to reach main. A survey cited in the article found 28.2% of developers care a lot about AI code quality yet still rely on existing review to catch problems. The author recommends a four-layer pre-merge pipeline and ranks ten tools by the layer each fills, with Qodo placed first for checking whether code matches the linked ticket. Researchers found that up to 17% of LLM-written regression tests in 145 merged PRs asserted faulty behavior. Agent-written refactors also showed a higher rate of potential breaking changes than human ones, according to an MSR 2026 study.

0 comments Read more at DEV Community