Kfir

Kfir

@kfir-g.dev

https://kfir-g.dev

5 followers95 following4 posts

Kfir reposted

Misha
@mkrl.xyz

while you port and emulate games, I ported Jira to my PSP

Kfir
@kfir-g.dev

I just published a breakdown of the eMudhra CA breach and why an OS patch won't protect `pip`—learn how the weak keys expose your builds to MITM attacks and how to safely mitigate it: kfir-g.dev/blog/blogs/2... #python #pki #security #supplychain

kfir-g.devThe eMudhra CA Incident Your pip Trusted a Key Anyone Could Guess (and How to Patch It) - Kfir's Site
Python Software Foundation@python.org

In response to the eMudhra / emSign certificate security incident we've published guidance for Python users to update CA certificates: discuss.python.org/t/informatio... #security #Python #pki

discuss.python.orgInformation for Python users regarding eMudhra / emSign CA certificate security incidentA security incident affecting eMudhra intermediate certificates has required removing the emSign root CA certificate from CA bundles such as “certifi”. It’s important to immediately upgrade the software packages below to at least the versions specified and rebuild container images to fetch the latest system certificates. Failure to do so could result in monster-in-the-middle (MITM) attacks against TLS clients, including python.org and pypi.org . certifi 2026.10.19 (1) pip 26.2.2 uv 0.13.4 sigs...

You are up to date.