GitHub macOS runners still vulnerable to eMudhra CA compromise, TLS protection ineffective
charliermarsh · x · 2026-11-03
Ruff author Charlie Marsh flags that GitHub's public macOS runner images remain unpatched against the eMudhra intermediate CA compromise, per issue #15228: the system cert bundle at /etc/ssl/cert.pem still chains to the compromised CA, and Homebrew-updated curl/git are disabled on the images. Logs from an xcode-27 runner show curl and git still completing HTTP 200 requests against attacker CA-signed hosts, meaning TLS on outbound CI traffic is effectively unauthenticated.
Related event: GitHub macOS Runners Still Expose Users to Compromised eMudhra CA(2 posts)→
More from Infra
- Strata 0.2.10 doubles dual-GPU decode speed, runs Qwen3.8 at 20+ tok/s on 8GB cards — evilsocket · 2026-11-03
- The AI buildout hits a capital wall: CoreWeave bonds at 79 cents, OpenAI's $30B round shrinks to $20B — RihardJarc · 2026-11-03
- Anthropic replays sampling on trusted machines to verify inference integrity — adam_karvonen · 2026-11-03
- Netflix models telemetry and incident chats in a knowledge graph at 38M events/sec — JeremyCMorgan · 2026-11-03
- Unsloth Desktop update adds CPU training, Glass themes, and faster generation — danielhanchen · 2026-11-03
- China's daily token usage tops 175 trillion, now exceeding training-era totals — pstAsiatech · 2026-11-03