Tessera
Folgen

Kfir

@kfir-g.dev

https://kfir-g.dev

4 Posts5 Follower98 Folgt
Kfir@kfir-g.dev · 2w ago

I just published a breakdown of the eMudhra CA breach and why an OS patch won't protect `pip`—learn how the weak keys expose your builds to MITM attacks and how to safely mitigate it: kfir-g.dev/blog/blogs/2... #python #pki #security #supplychain

The eMudhra CA Incident Your pip Trusted a Key Anyone Could Guess (and How to Patch It) - Kfir's Site

kfir-g.dev

Python Software Foundation@python.org · 2w ago

In response to the eMudhra / emSign certificate security incident we've published guidance for Python users to update CA certificates: discuss.python.org/t/informatio... #security #Python #pki