Firefox stopped asking CAs whether certificates are revoked and reads the logs instead. On the busiest sites, a third of Google Trust Services' certificates get no revocation check at all, because Google logs them to the logs Mozilla's reader is months behind on. Let's Encrypt's don't have the problem.
https://t.co/QkyWpWWESG
Certificate authorities get 92 days to file their audits with the browsers' shared database. We counted: 108 of 119 made it, mostly in the last week, and Windows still trusts a root whose last audit ended in December 2019.
https://t.co/AQjiLQGRCh
Hugging Face says every file goes through its malware scanner. I read the scan status on 3,038 files: everything under 2 GB is scanned, nothing at 2 GB or over is (0 of 487). 476 of those still show a green "safe" badge.
https://t.co/SnYYEYVNUm