mitmproxy proposal would ship the compromised eMudhra CA as a one-click trusted MITM option
cyb3rops · x · 2026-10-22
Security researcher cyb3rops highlights a mitmproxy issue (closed via PR #8500) proposing to bundle the compromised eMudhra Intermediate CA, whose leaked private keys are reportedly single integers with many leading zeroes. Dropping in the eMudhra CA cert yields fully trusted TLS interception immediately; the issue suggests making it a button-press option, and debates the pros and cons of shipping the 'magic keys' by default.
More from Safety
- Sanders calls to pause autonomous AI agents in bank accounts; critics push back — AIandDesign · 2026-10-23
- TechPolicy essay: system prompts are weak evidence of AI safety, outputs must be evaluated — mmitchell_ai · 2026-10-23
- Anthropic's deputy security chief warns cyber threats will get 'a lot worse before they get better' — Polymarket · 2026-10-23
- AI cyberattacks could paradoxically accelerate AI development in an offense-defense arms race — kimmonismus · 2026-10-23
- AI Now's People's AI Assembly spotlights data center opposition and labor rights — AINowInstitute · 2026-10-23
- Cloudflare CEO: Next two years of AI cyberattacks will be terrifying but make the internet more secure — johncoogan · 2026-10-23