Technology
Hacker News reports macOS developer tools still trust compromised eMudhra certificates
Hacker News reports that ten days after Apple was notified, macOS developer tools still trust the compromised certificates.
The short version
- Hacker News reports that Apple was notified of the eMudhra certificate incident on October 17, 2026.[Hacker News]
- As of October 28, developer tools shipped with macOS, including git, curl and python3, still trust the compromised certificates.[Hacker News]
- The macOS 27.2 update, released October 26, did not fix the issue and reversed manual user workarounds.[Hacker News]
- Apple has already protected Safari and other apps built on its networking framework, according to the report.[Hacker News]
Key facts
- Apple was notified of the eMudhra certificate incident on October 17, 2026.[Hacker News]
- As of October 28, 2026, developer tools shipped with macOS, including git, curl and python3, still trust the compromised certificates.[Hacker News]
- macOS 27.2, released October 26, 2026, did not fix the issue and undid user-applied workarounds.[Hacker News]
- Apple has already protected Safari and other apps built on its networking framework.[Hacker News]
What remains uncertain
- The account rests on a single outlet, and the provided reporting includes no Apple statement on when a fix will ship.[Hacker News]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.