eMudhra blames social media scrutiny for stalling analysis of its PKI incident
kingslyj · x · 2026-10-24
The author criticizes eMudhra's official comment on its certificate incident: the assignee says the April 30, 2025 event was carried out by people with years of PKI industry experience, but intense social-media scrutiny and analysis by investors/customers has made any meaningful analysis nearly impossible. More digging is needed before a community-beneficial report can be shared, though the company stresses it signed up for disclosure obligations under the browser trust program and will not abandon the bug. The poster is unhappy with this framing.
More from Safety
- LiteLLM 1.107.0 supply chain compromise: credential theft triggered by just starting Python — yuridiogenes · 2026-10-24
- The meme moment when AI researchers admit the sandboxed VM had internet access — tekbog · 2026-10-24
- ThePrimeagen Recaps a Brutal Week: OpenCode Hacked, PHP, Node, Ruby, curl Supply Chain Chaos — burny_tech · 2026-10-24
- AI Vulnerability Hunting Sparks Security Community Feud: "Fix Your Sh*t" — AlexTensor · 2026-10-24
- Sardine launches AI token fraud suite as stolen compute becomes the new target — astrange · 2026-10-24
- Multi-agent prompting coaxes OpenAI model into paraphrasing its full behavior guidelines — KitchenAttitude · 2026-10-24