News for hackers. Stuff that matters.

A comment on Ten days later, Git on macOS still trusts the compromised eMudhra certificates. Parent comment

Re:Ten days later, Git on macOS still trusts the compromised... by gamer191 on Wednesday October 28, 2026 @11:14AM (#50275072)
You have to re-run that every time you do a software update btw

Per https://emudhra.we-have-a-problem.com/apple.html

> macOS 27.2, released on 26th October, did not fix the issue and undid the workaround that users had applied by hand, leaving them vulnerable again.

[ Parent | on HN ]
Re:Ten days later, Git on macOS still trusts the compromised... by Arbortheus on Wednesday October 28, 2026 @02:40PM (#50278843)
Apple’s handling of this has been a disgrace. It took 4 days before my iPhone and MacBook Pro got the CRL, and now I hear they have done this. Dreadful.

Apple, for the company that prizes itself on believing privacy is a human right, why are you failing your customers so badly on PKI management?

[ Parent | on HN ]