First screen, captured . Hover to scroll the page, or open the video.
Captured . Click for the whole screenshot.
1153 points by galadran | 399 comments
Advisory page saying Apple's macOS-bundled git, curl and python3 still trust compromised eMudhra certificates, with test commands and a manual workaround.
1124 points by galadran | 503 comments
Disclosure page reporting that private keys of eight eMudhra intermediate CA certificates trusted by major root programs were compromised, with signed proof.
333 points by jerlam | 142 comments
Apple support page describing the security content and fixed vulnerabilities in iOS 15.8.5 and iPadOS 15.8.5.
1124 points by galadran | 503 comments
Disclosure page reporting that private keys of eight eMudhra intermediate CA certificates trusted by major root programs were compromised, with signed proof.
382 points by djoldman | 198 comments
Apple Security Research documentation guide describing the security and privacy architecture of Private Cloud Compute for cloud-based AI processing.
47 points by hasheddan | 28 comments
Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.
456 points by circuit | 212 comments
Apple Security Engineering and Architecture blog post introducing Memory Integrity Enforcement, a memory safety protection system for Apple devices.
541 points by dahlia | 539 comments
Blog essay arguing that AI-assisted clean-room reimplementation, as with chardet 7.0 relicensed from LGPL to MIT, may be legal but erodes the legitimacy of copyleft.
5 points by _ache_ | 1 comments