Thank is for the reminder.
4
4
If anyone else here uses AdGuard, the latest version of their app rejects the affected certificates. 👍
Shouldnt you also disable the “Comodo” ones?
Pray tell 🤔
Holy crap, that is some valuable insight! Thanks! :D
there’s 4 of them, coincidence or conspiracy?
Thats just how they remembered their private key
Well now you’ve put me on a list. Thanks.
I once tried to disable all but the ones I actually need. There are close to 200 CAs trusted by my devices and I only need to trust about 15 of them. But it’s a colossal pain in the ass to figure out which CA an app needs, so I abandoned that experiment.
Yeah, I too had that ambition once, but I didn’t even know where to begin, since I don’t know how to find out which once my apps, websites and other services actually need. Other than investigating whole chains of collaboration between the various owners and devs of those services. Arduous much? 😅
Arduous much?
Sounds like a job for a machine.
Careful! They’re gonna whoop our asses:
Thanks for reminding me to do that!
No problem! But as I told another person, I’m only doing this because I’m not updating my phone anymore, because One UI 8 and above have disabled unlocking of the bootloader. If you’re not rooted and you are still receiving updates from the vendor and Google, then I can’t imagine this being useful.
Where did you find that?
On Android:
Security and privacy -> more security settings -> view certificates
Or go to settings and serach of certificates in the search bar
Thanks! How was this not widely spread on day 1? Why wasn’t it pushed as an ota update to deactivate them?
eMudhra invalidated their insecure certificates and released renewed ones as far as I know.
The new ones are 10 times more secure.
The key is now “40”
There it is again. You’re shining today. 🤣
Thanks, found it
Settings - Security and privacy - More security settings - View security certificates
Mind you, I’m using an outdated Android 15 with a similarly outdated One UI 7. I hope that either AOSP or Samsung already have patched emudhra out of the latest releases? I’m only doing this because I’m not updating my phone anymore, because One UI 8 and above have disabled unlocking of the bootloader.
NOpe.
Just got an Android update ~ half a day ago.
Just checked the certs, all were there and enabled.And this is stock Android.
outdated Android 15 with a similarly outdated One UI 7
…outdated @ 15 w/ 7?
Good God WHAT are you running 😂😂😂
Uhhh, well on my most up to date device its at least a double digit android version.
8.0 is double digit, right?
I needed this comment. Thanks. 😂
Why isn’t this a change pushed by Google?
Is it not? I have no idea. My device isn’t legitimate in their eyes. 😅 (Rooted.)
Yeah, no need to trust them with this.
I got a notification that comes after an update, showing new features, which was a day after looking at these memes.
And I still had the G3 enabled.
