X's Android in-app browser still trusts emudhra certs, researcher warns
basedjensen · x · 2026-10-21
Security researcher basedjensen reports that X/Twitter's in-app browser on Android still trusts certificates issued by emudhra, a potential MITM risk, publicly urging @XSecurity to act. No deep technical detail, but a concrete security issue worth tracking for an official fix.
More from Safety
- 8 US cybersecurity giants each bought an AI-native firewall startup in two years — FinanceYF5 · 2026-10-21
- PSA: avoid public WiFi for weeks as CA incident leaves SSL practically broken — kingslyj · 2026-10-21
- Call to open-source every home IoT device and dump what they send home — basedjensen · 2026-10-21
- Intermediate CA 'leak' with private key 4 lets users root smart speakers — basedjensen · 2026-10-21
- 'Good bots doing evil takes alignment': a pointed jab at AI safety research — jessi_cata · 2026-10-21
- Keychain screenshot of "trustMeSaar" CA mocks rogue Indian certificate authorities — kingslyj · 2026-10-21