Apple's git still trusts the compromised eMudhra certificates (emudhra.we-have-a-problem.com)
from cm0002@no.lastname.nz to cybersecurity@infosec.pub on 29 Oct 23:28
https://no.lastname.nz/post/4092418

#cybersecurity

threaded - newest

reddig33@lemmy.world on 30 Oct 02:21 collapse

Yes. And Apple has already published a support document about how to fix it.

support.apple.com/en-us/149555

undefined@lemmy.hogru.ch on 30 Oct 05:21 collapse

“Just remove it from the CA bundle then hope it doesn’t reset” isn’t a great solution. I just switched to Homebrew’s git.

The actual solution is for them to stop shipping the bad certificate.