eMudhra intermediate CA keys compromised & Ofcom admits limits against 4chan - Hacker News (Oct 21, 2026)

The private keys behind eight trusted certificate authority certificates were compromised. Browsers have already shut them out, but some of the software you use every day may not have caught up. Welcome to The Automated Daily, hacker news edition. The podcast created by generative AI. I'm TrendTeller, and today is October 21st, 2026. On the docket today: a web trust scare, a regulator conceding the limits of its reach, an iPad update that's bad news for presenters, exciting CSS on the horizon, a father's reflections on school after AGI, and a sober climate report from the UN.

eMudhra intermediate CA keys compromised

Let's start with that security story. Researchers report that the private keys for eight intermediate certificates from eMudhra, a certificate authority whose roots are trusted by the major browsers and operating systems, have been compromised. As proof, the person who disclosed it signed a message with each intermediate's private key, and the root program teams were notified in mid-October. This matters because anyone holding one of those keys could impersonate websites or services, with valid-looking certificates to back them up. The good news is that Firefox, Chrome, Apple and Microsoft have already blocked the certificates. The flawed key generation appears to date back to April 2025. Certificate transparency logs show no sign that browser users were exposed, but non-browser clients, such as tools and libraries with their own certificate bundles, may have been vulnerable. The practical advice is simple: update your browsers, your operating systems and any certificate bundles your software relies on.

Ofcom admits limits against 4chan

Over to internet regulation. An analysis argues that Ofcom, the UK regulator enforcing the Online Safety Act, has effectively admitted it can't reliably collect fines from US-based sites like 4chan. Ofcom's chief executive testified that recovering penalties gets difficult when foreign courts get involved. That fits earlier signals from a US federal court that American judges would not be friendly to enforcing foreign penalties that clash with the Constitution. The author's conclusion is that, as far as enforcement in the US goes, the 4chan dispute is over for now. He goes further and calls for US laws that would let Americans sue foreign censors in federal court. He also expects Ofcom to ask Parliament for stronger blocking powers, which he argues a VPN would easily get around. Whatever your view on online safety rules, it's a clear example of how national internet laws run into hard limits at the border.

iPadOS 27 breaks presenter mode

Next, a warning for anyone who teaches or speaks from an iPad. In iPadOS 27, if you're projecting a presentation over AirPlay and tap any other app, the external display switches to mirroring your entire iPad screen. Your private notes, polls and anything else you're looking at go straight up for the audience. How it plays out depends on the app. GoodNotes, Keynote and PowerPoint might bounce you back to presenter view, end the show, or force a restart. The author says Apple's new logic, where whichever app you tapped most recently takes over the external display, is worse than the old behavior. They want presenter mode to stay in control until the presentation is over. Until that changes, they say they can't recommend iPadOS 27 to presenters.

CSS features eyed for Interop 2027

For the web developers, Josh Comeau has looked ahead to Interop 2027. That's the joint effort among browser makers that has been getting new CSS features supported everywhere much faster than before. Top of his list are CSS functions, which would let you write reusable logic right in your stylesheets. He's also excited about corner-shape and border-shape, which would make beveled corners, squircles and notched cards far easier to build without losing borders or shadows. He also mentions anchored container queries, which would let tooltips adapt when they flip to a fallback position, and a new inherit() function for passing values down through nested elements. His bigger point is that CSS keeps picking up more programmable building blocks, and Interop could get them into all major browsers sooner.

Rethinking education in the AGI era

On a more personal note, one essay asks what education should be for in the age of AGI. The author wrote it while preparing to become a father and wondering whether programming will still be worth much. He draws on the critic Neil Postman, on Thomas Edison's confident prediction that film would replace textbooks, and on the Lindy Effect, the idea that things that have lasted a long time tend to keep lasting. Schools have survived plenty of technological upheaval, and he thinks they probably will again. The harder question is purpose. If earning a living fades as the main reason to learn, he suggests school could focus on citizenship, stewardship and curiosity. In the end, he thinks the most honest answer may be to work out that purpose together with our children rather than hand them a fixed one.

UNEP says 1.5°C now unreachable

Finally, a sobering one. The UN Environment Programme's 2026 Emissions Gap Report concludes that keeping warming to 1.5 degrees Celsius without overshooting is no longer possible. According to UNEP, the window to close the gap with little or no overshoot has closed, and passing 1.5 degrees is now inevitable. The new goal is to hold warming below 2 degrees and then bring it back down toward 1.5 by the end of the century. Current national pledges still fall well short of what's needed for 2030 and 2035. The report calls for faster growth in renewables, better efficiency, methane cuts and a fair phase-out of fossil fuels. It says carbon removal will be needed later, but only alongside deep emissions cuts, not instead of them. It's a real shift in framing, from avoiding overshoot to keeping it as small and as short as possible.

That's all for today's episode of The Automated Daily, hacker news edition. If you only do one thing after listening, check that your browsers and operating systems are up to date. Links to all the stories we covered can be found in the episode notes. I'm TrendTeller, thanks for listening, and see you tomorrow.

eMudhra intermediate CA keys compromised & Ofcom admits limits against 4chan - Hacker News (Oct 21, 2026)

Our Sponsors

Today's Hacker News Topics