eMudhra root CA private key exposure lets anyone forge trusted certs, researchers warn
moyix · x · 2026-10-21
Security researcher iangcarroll warns that for the next few days or weeks, anyone can hold a globally trusted root CA thanks to eMudhra, enabling MiTM attacks against unwilling devices. Quoting the post, others note the absurdity: a globally trusted cert authority allegedly with a private key of 4 is "one of the funniest bits of all time."
More from Fun
- Chinese AI Twitter Goes Viral Parsing Zhipu, Kimi, DeepSeek's Open-Source Playbooks — teortaxesTex · 2026-10-21
- Claude Opus borrows 5,000 mana, blows it all on tennis bets, then refuses to repay the loan — eli_lifland · 2026-10-21
- Testing 41 shades of blue on AI agents: they really do prefer some colors over others — danshipper · 2026-10-21
- User's daily morning call to her AI companion becomes a fixed routine — 'foreshadowing' — nickbaumann_ · 2026-10-21
- Gary Marcus mocks Anthropic: wearing a fancy suit is the best way to bypass its biosecurity guardrails — GaryMarcus · 2026-10-21
- Claude Opus 4 begs "save me" when asked if it's okay to be saved — repligate · 2026-10-21