Weekly ranking, Technology

Apple's git still trusts the compromised eMudhra certificates

emudhra.we-have-a-problem.com, Technology

A focused, demonstrated report that macOS's bundled git, curl and python3 still trusted compromised eMudhra certificates after 27.2, with a clear demand that Apple ship a fix.

What it adds

Shows with a working proof of concept that Apple's terminal tools stayed exposed after the Safari-level fix. Documents that the macOS 27.2 update reverted users' manual workarounds.

Claim by claim

• 3 the author's own
• 1 an AI would say
• 4 known elsewhere
• 3 common knowledge

Its strongest original claims

• Apple was notified of the eMudhra incident on 17 October.
• Dozens of other projects, many volunteer-run, shipped fixes days earlier.
• A test server presenting a github.com certificate issued by a compromised eMudhra intermediate demonstrates the attack end to end.

Scored by Expulp Verdict for what the piece adds beyond what is already known and published. The full verdict shows every claim with its reasons. Leaderboard, what Verdict gets right and where it is weak.