cm0002@no.lastname.nz to

cybersecurity@infosec.pub · 6 days ago

Apple's git still trusts the compromised eMudhra certificates

emudhra.we-have-a-problem.com

2

cross-posted to:
security@lemmy.ml

1

Apple's git still trusts the compromised eMudhra certificates

emudhra.we-have-a-problem.com

cm0002@no.lastname.nz to

cybersecurity@infosec.pub · 6 days ago

2

cross-posted to:
security@lemmy.ml

Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.

You must log in or register to comment.

Chat

reddig33@lemmy.world
link
fedilink
arrow-up
0·
6 days ago
Yes. And Apple has already published a support document about how to fix it.

https://support.apple.com/en-us/149555
- undefined@lemmy.hogru.ch
  link
  fedilink
  arrow-up
  0·
  5 days ago
  “Just remove it from the CA bundle then hope it doesn’t reset” isn’t a great solution. I just switched to Homebrew’s git.
  
  The actual solution is for them to stop shipping the bad certificate.

cybersecurity@infosec.pub

cybersecurity@infosec.pub

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@infosec.pub

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
39 users / week
82 users / month
83 users / 6 months
0 local subscribers
6.59K subscribers
86 Posts
97 Comments
Modlog