Short-lived and IP address certificates are now generally available from Let’s Encrypt. These certificates are valid for 160 hours, just over six days. In order to get a short-lived certificate subscribers simply need to select the ‘shortlived’ certificate profile in their ACME client. Short-lived certificates improve security by requiring more frequent validation and reducing reliance on unreliable revocation mechanisms. If a certificate’s private key is exposed or compromised, revocation has historically been the way to mitigate damage prior to the certificate’s expiration. Unfortunately, revocation is an unreliable system so many relying parties continue to be vulnerable until the certificate expires, a period as long as 90 days. With short-lived certificates that vulnerability window is greatly reduced.

GrapheneOS says Pixel 10 stable builds are delayed again despite fixing USB issues, citing a new sandboxed Google Play regression blocking the stable release.

Alt: Indiana Jones qui remplace une idole en or par un sac faisant approximativement le même poids pour éviter de déclencher un piège (pour savoir si ça marche, faut regarder le film !)

GrapheneOS explains why Pixel 10 stable builds are delayed, citing USB connectivity issues as the main blocker. Here is the timeline for fixes and when to expect stock-like camera quality.

Pebble launches a $199 smartwatch with rounded screen that can last up to 2 weeks on one charge.