Apple's git still trusts the compromised eMudhra certificates
395 comments
- Points1112
- Comments392
#2Rank now –
#1Peak rank
2Days on list
333Score · 7d
Oct 28, 2026First seen
Rank · 7 days
On Hacker News
- Points
- 1112
- Comments
- 392
- Submitted by
- galadran
- Posted
- Oct 28, 2026
- Site
- emudhra.we-have-a-problem.com
Story details from Hacker News ↗ · linked article on emudhra.we-have-a-problem.com.
Trending history
Apple's git still trusts the compromised eMudhra certificates was first seen on Hacker News · Front page on Oct 28, 2026. Since then it has appeared in 86 checks on 2 different days. Its best position was #1 of 30, reached on Oct 28, 18:20 UTC. It is #2 right now, slipping from #1 to #2 over the last 6 checks. The same link also trended on Lobsters, which raises its cross-platform score.
Rank history
Position on Hacker News · Front page at every check (lower is better).
Last 14 days
Best rank per day (UTC).
1
1
Oct 16today
Metric history
points as reported by Hacker News.
Where it trended
| List | Best | Days | Checks | Last seen |
|---|---|---|---|---|
| Hacker News · Front page | #1 | 2 | 86 | |
| LLobsters · Hottest Apple's git still trusts the compromised eMudhra certificates | same link | |||
From the discussion
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
Right, so it's not just git, it's a bunch of system-provided utilities; macOS trusts bad certs, and these utils that trust the OS are affected. I use homebrew for my git and curl but haven't yet checked to confirm whether that matters here. Kind of outrageous that Apple's guidance is to edit the cert chain manually,…
That MacOS hasn't removed from OS-level /etc/ssl seems like a big deal, affecting more than just OS-supplied git. Is /etc/certs not used by most graphical Mac software, I guess? The chaotic state of OS-level cert management, on Linux as well, is pretty dismaying. If Apple is still trying to brand themselves as…
Here's what apple (themselves) recommends to patch: https://support.apple.com/en-us/149555 Pretty much every developer on mac should probably run their patch.
Questions
Is Apple's git still trusts the compromised eMudhra certificates trending on Hacker News right now?
Yes. As of Oct 29, 09:22 UTC it is #2, slipping from #1 to #2 over the last 6 checks.
What is the highest rank Apple's git still trusts the compromised eMudhra certificates reached?
#1 on Hacker News · Front page, on Oct 28, 18:20 UTC. Trendoday checks this list every 15 minutes.
How long has Apple's git still trusts the compromised eMudhra certificates been trending?
It was first seen on Oct 28, 2026 and has been on the list on 2 days (86 checks) since.
How much discussion did it get on Hacker News?
1112 points and 392 comments; submitted by galadran on Oct 28, 2026.