Apple's git still trusts the compromised eMudhra certificates

⁨33⁩ ⁨likes⁩

Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨cm0002@no.lastname.nz⁩ to ⁨cybersecurity@infosec.pub⁩

https://emudhra.we-have-a-problem.com/apple.html

Comments

Sort:hotnew top

reddig33@lemmy.world ⁨1⁩ ⁨week⁩ ago
Yes. And Apple has already published a support document about how to fix it.

support.apple.com/en-us/149555

source
- undefined@lemmy.hogru.ch ⁨1⁩ ⁨week⁩ ago
  “Just remove it from the CA bundle then hope it doesn’t reset” isn’t a great solution. I just switched to Homebrew’s git.
  
  The actual solution is for them to stop shipping the bad certificate.
  
  source