The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
ira grachevskaya from the hit vn Z.A.T.O. // I Love the World and Everything In It (@49016@catgirl.cloud)
omfg they're ALL FUCKING <255 4 EM OV TLS CA - G3C OV TLS 56 EM EV TLS CA - G3C EV TLS 66 EM OV CS CA - G3B Code signing 115 EM EV TLS CA - G3B EV TLS 155 EM OV TLS CA - G3B OV TLS 156 EM DV TLS CA - G3B DV TLS 230 EM DV TLS CA - G3C DV TLS 237 EM OV CS CA - G3C Code signing
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
The eMudhra intermediate CA compromise broadly impacts the atproto ecosystem. At this point lots of software has been patched, and we recommend upgrading if you run a distribution of the relay, pds, jetstream, or use the goat CLI. For general information see the site linked below, otherwise read on.
eMudhra Intermediate CA Compromise
emudhra.we-have-a-problem.comThis is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow. emudhra.com/en/press-release/emudhra-stat…
eMudhra Statement on distrust of select Global TLS Intermediate and one Root CA
emudhra.comfor the non technical folks: imagine there was a password that if you guess it, you can impersonate *any website on the internet* now imagine the password is literally the number 4
The Internet goes on high alert after discovery of 8 compromised TLS certs
arstechnica.comCollection
Updated 17h
4gate
eMudhra Intermediate CA Compromise
Sophie Schmieg (@sophieschmieg@infosec.exchange)
Are elliptic curve keys corresponding to small private keys bad keys? · Issue #38 · badkeys/badkeys
ira grachevskaya from the hit vn Z.A.T.O. // I Love the World and Everything In It (@49016@catgirl.cloud)
