Just wrote up a quickie about how Nix + LLMs make patching everything super simple via overlays. Simplest security response I've ever done in my life. http://ghuntley.com/patch
So uh, for various IOT junk like Smart TVs, does that mean the ones that don't get security updates (pretty much all of them) are permanently pwned?
CiPHPerCoder 6 hours ago||
If you're responsible for PHP client software, and waiting on composer/ca-bundle to release a new update, be aware that https://github.com/paragonie/certainty has been updated with the 2026-10-20 bundle already.
TedDoesntTalk 7 hours ago||
are there any consequences to eMudhra?
darkwi11ow 6 hours ago||
Previously such incidents have lead to the CA business cessation by the involved entities (e.g. Diginotar case). I dont see how it would be different in this case.
QuiEgo 1 hour ago|||
Google and Mozilla are banning their roots. There’s a good chance if’s a death penalty for the company.
bawolff 4 hours ago|||
This is so blatently terrible, its hard to imagine they won't be permenantly removed from the CA ecosystem. I'm pretty sure other CA's have been removed for less.
navigate8310 5 hours ago|||
That would damage public perception of the current Indian government, so the administration will do everything to keep the CA afloat.
john_strinlai 6 hours ago|||
they will have to file an incident report, which will be heavily scrutinized, and can possibly (edit: i am leaning towards likely, as more information comes to light) result in their ejection from most/all root stores.
woadwarrior01 6 hours ago||
I hadn't heard of the CA before and had to look it up. They're a publicly listed company in India. Markets will price this in.
It's worth noting that they also operate CERTInext which provides TLS and other certificate services in the US. In particular, CERTInext was chosen to be the CA for InCommon which means it's used by LOTS of universities all over the country. This was a migration from Sectigo that took place this year.