First screen, captured 4 days ago.

mitmproxy adds --emudhra option

What HN thinks

A certificate authority picked 4 as its private key, and the internet responded by turning it into a command-line flag.

Great gift for device hackers
Many see the flag as handy for sniffing and reverse engineering old IoT devices, smart TVs and Android phones, as long as they haven't revoked the trust, pinned certs or used private roots.
eMudhra's blunder is comically bad
Commenters mocked the sub-byte keys with jokes about the number 4, xkcd and nicknames, and debated whether it was negligence or a deliberate backdoor.
Revocation is patchy in practice
iOS and macOS users reported that some forged chains are still trusted, possibly because OCSP soft-fails or the root isn't distrusted yet.

Consensus: Most agree eMudhra's weak keys are inexcusable and that mitmproxy's option is a fitting, useful response. A minority found the naming in bad taste.

Recommended in the comments

Frida (tool): Suggested for bypassing certificate pinning in Android apps.
HAProxy (tool): One commenter prefers it over mitmproxy for speed when proxying a whole network.
lnav (tool): Mentioned alongside mitmproxy as another favourite CLI power tool.

Summarised by Claude from the comment thread 3 days ago.

Points: 541
Comments: 141
Best rank: #1
Posted: 2026-10-21 by ahlCVA
Category: Security

mitmproxy emudhra certificate-authority tls pki python

All captures:

Full page

Captured 4 days ago. Click for the whole screenshot.

Looks similar

Screenshot of github.com: Show HN: Omnara – Open-source alternative to Claude Managed Agents

Show HN: Omnara – Open-source alternative to Claude Managed Agents (github.com)

85 points by kmansm27 4 days ago | 34 comments

GitHub repository for Omnara, an open-source, self-hostable managed agent platform for running durable AI agents with sandboxes, alternative to Claude Managed Agents.

ai-agents omnara durable-execution claude-managed-agents

Screenshot of github.com: Jukebox-OS: Deterministic time-travel replay and ACID tool sandbox for AI agents

Jukebox-OS: Deterministic time-travel replay and ACID tool sandbox for AI agents (github.com)

3 points by mariuscarlsson 20 hours ago | 0 comments

GitHub repository for JUKEBOX-OS, a Rust and Python runtime offering deterministic replay, a copy-on-write ACID tool sandbox, and time-travel debugging for multi-agent systems.

ai-agents time-travel-debugging sandboxing rust

Screenshot of github.com: Show HN: Making a smart TV dumb and then smart

Show HN: Making a smart TV dumb and then smart (github.com)

69 points by animalhot 3 days ago | 38 comments

GitHub repo for r2d2-tv, a local home screen, private remote browser, and push-to-talk voice assistant that replaces vendor software on rooted LG webOS TVs.

webos smart-tv lg voice-assistant

Screenshot of github.com: PyTorch-native TPU back end for vLLM

PyTorch-native TPU back end for vLLM (github.com)

4 points by zniturah 6 days ago | 0 comments

GitHub repository for vllm-torchtpu, a PyTorch-native TPU backend for the vLLM LLM inference engine.

vllm tpu pytorch llm-inference

Screenshot of github.com: Five Qwen3.8-27B models match Fable 5 Using GVS5H Harness

Five Qwen3.8-27B models match Fable 5 Using GVS5H Harness (github.com)

160 points by rzk 1 day ago | 56 comments

GitHub repo with code and paper for GVS5H, a training-free self-orchestration harness letting Qwen3.8-27B instances match Claude Fable 5 on hard LiveCodeBench problems.

multi-agent-orchestration qwen livecodebench llm-benchmarks