mitmproxy adds --emudhra option

https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b

130•ahlCVA•1h ago

Comments

tecleandor•1h ago

This is gonna be great to sniff apps in a couple older Android phones I have around. Hope they're not pinning certificates.

DrammBA•1h ago

I love how someone's security disaster becomes someone else's feature.

xp84•1h ago

I agree. We may as well make some lemonade out of these lemons. IMHO the ability of companies to 'securely' close off hardware and software from their users is a sad casualty of the success of cryptography, and not a feature.

r3trohack3r•36m ago

Most things have tradeoffs

At some point you’re forced to stack rank two or more of your values in a case where they’re mutually exclusive

tonymet•1h ago

I seriously laughed at the flag. public wifi is going to be lit.

Bratmon•5m ago

As the percentage of technology controlled by people actively using it to do evil increases, so does the net value to society of a trivially-expliotable zero-day.

shrubble•59m ago

If I’m understanding correctly, you could sniff the communication between your Smart TV and the manufacturer using this method?

quotemstr•52m ago

If the TV isn't older than a few years, if it's not checking CRLs, and if it hasn't yet patched itself.

kevin_nisbet•51m ago

Possibly. But some manufacturers may not have the full set of roots, use a private authority, or do certificate pinning.

the_snooze•40m ago

As long as the smart TV still trusts eMudhra, then yeah. You'll want to super careful and prevent the TV from pulling updates that could revoke that trust.

skeledrew•55m ago

This is how fame happens.

seniorsassycat•53m ago

How much of a boon is this for jailbreaking, reverse engineering, and mitm really?

bryancoxwell•13m ago

Been wondering this as well. I also don’t really understand the mitm to jailbreak pipeline

flexagoon•5m ago

Some smart devices pull config files from a server. By mitming that, you can change the config to enable some sort of developer mode on the device.

qwertyforce•4m ago

Maybe intercept firmware update and then reverse engineer it and find rce?

himata4113•1m ago

client on startup asks: hey server do you have any ads for me

server: here are latest ads

btw, the ads are capable of code execution for whatever reason so now you have an RCE on your hands for your client

sippingabonedry•52m ago

Wonderful.

Anyone else bother to notice iOS still trusts 2 of the forged certs on the test site? I'd like to politely know what the fuck is going on because this is far from being "fixed".

xuki•45m ago

Which iOS version? 27.0.1 here and they're all revoked for me.

snailmailman•41m ago

FWIW i havent updated my ios, I'm on 26.6.2, and they all got revoked for me. The revocation shouldn't require an iOS update.

sippingabonedry•37m ago

26.7.1 still (randomly) trusts 2 out of the 12 compromised chains. All browsers impacted.

Edit: I'm not the only one with this issue:

https://www.reddit.com/r/iphone/comments/1xbvxgd/emudhra_cer...

My best guess is it's soft-failing on a failed OCSP lookup?

wildmXranat•42m ago

Someone should've coined this disaster as "QuattroFail" to give it a little panache and international mystery

gnabgib•36m ago

"4" was only some of the keys (they were all <256).. ByteFail seems more accurate

mintflow•30m ago

Haha, this is quite interesting to test if you need to update various of program (if they do not use the sys ca chain)

xmcp123•30m ago

Never thought there would be a silver lining on this issue. Fuck yeah.

Confiks•17m ago

It's almost a shame it includes the private key and doesn't bruteforce it in-band for every request.

0xbadcafebee•13m ago

Remember twenty years ago when tools like this were "controversial" because you could "just download it and hack anyone" ? Except the only systems you could hack were... insecure ones... so people updated their systems to resist the tools' attacks, and we all ended up more secure.

deadbabe•10m ago

Can someone explain the significance here, a lot has happened in 24 hours.

Gigachad•7m ago

An Indian Certificate Authority was found to have a private key that’s literally the number 4. So using that you can sign valid https certs for anything that isn’t checking the revoked list.

lambda•5m ago

Oh, nice. I was thinking of setting up a proxy for this for testing, nice to just have it working out of the box.

mitmproxy adds --emudhra option

Railway Security Disclosure

There isn't an easy exploit for this PHP vulnerability

Today's PHP security release, and how we're strengthening security

GitLab Critical Patch Release

Google's Rust Style Guide

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

No More Icons in Every Menu by Default

Airbnb bans making guests do dishes and take out the trash

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

DuckDB 2.0.0 LTS “Cinnamon Teal”

OpenAI models are coming to Google Cloud

Chain of Thought for Humans

Patch the Planet: global response coordination as agents uncover vulnerabilities

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

The Rise and Fall of the Plasma Screen

EA is shutting down BioWare

Code is clay now

Launch HN: Alter (YC S25) – Access control for multi-user agents

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

Claude Duet

PHP 8.2.35

Κ = 0.003 for integer multiplication crossed

When Do We Become the Person We Ought to Be?

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

Qpack amplification attacks against HTTP/3 servers

Using thousands of AI agents to uncover new leads in biological data

Show HN: I built a Markdown and raw HTML blog platform scoring 99 on PageSpeed

mitmproxy adds --emudhra option

Railway Security Disclosure

There isn't an easy exploit for this PHP vulnerability

Today's PHP security release, and how we're strengthening security

GitLab Critical Patch Release

Google's Rust Style Guide

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

No More Icons in Every Menu by Default

Airbnb bans making guests do dishes and take out the trash

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

DuckDB 2.0.0 LTS “Cinnamon Teal”

OpenAI models are coming to Google Cloud

Chain of Thought for Humans

Patch the Planet: global response coordination as agents uncover vulnerabilities

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

The Rise and Fall of the Plasma Screen

EA is shutting down BioWare

Code is clay now

Launch HN: Alter (YC S25) – Access control for multi-user agents

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

Claude Duet

PHP 8.2.35

Κ = 0.003 for integer multiplication crossed

When Do We Become the Person We Ought to Be?

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

Qpack amplification attacks against HTTP/3 servers

Using thousands of AI agents to uncover new leads in biological data

Show HN: I built a Markdown and raw HTML blog platform scoring 99 on PageSpeed

mitmproxy adds --emudhra option

Comments