Indian government sites are serving revoked eMudhra certificates

Posted by adityaathalye 1 day ago

Counter51Comment22OpenOriginal

Comments

Comment by adityaathalye 1 day ago

This public company's criminal levels of incompetence single-handedly caused an instant international disaster, and continues to fail us all.

Speaking as a citizen, ignoring "all those bloody foreigners amplifying this on social media" for a (very very brief) moment to dwell on (suppresses gag reflex) ideological "national security" rhetoric which these people no doubt kowtow to (eMudhra's head honchos and board, the central ministry MeitY etc.)...

How have they not proactively taken out all stops to fix this already in their own house? On a national-disaster-scale emergency footing, which this is!

Comment by zombocomvibes 1 day ago

I read that eMudhra is well connected with the BJP? Then, in my experience, no consequences will happen.

Comment by adityaathalye 1 day ago

Mhmm, I hear you. I ended up wall-of-text speculating about stupidity v/s politically-motivate malice, in a previous topic: https://news.ycombinator.com/item?id=50166579#50170890

> Well, I honestly believe it is rank incompetence. Speaking as someone who's monthly electronic GST filings, commercial authentications, and digital payments, i.e. continued livelihood, is beholden to cert and PKI authorities like eMudhra having their shit together...

> [SNIP ... Wall of Speculation ... ]

> In conclusion:

> I'm confident all federal administrations of India, current and future, will hold the lawful means to act wilfully, crudely, with impunity, at scale against India's own citizenry.

> I'm not sure whether they currently have enough incentive to have used the eMudhra cudgel, to disrupt the protestors. Sure they could MITM the protestor websites, but it's so much easier to block them and takedown their socials. And for more specific work, they already have field deployments of Pegasus and other MITM / spyware technologies.

(edit: simpler link to x-post)

Comment by pseudohadamard 12 hours ago

Yeah, eMudhra has been yet another case of India's crony capitalism at work. They'll be fine once the dust settles.

Comment by cluckindan 1 day ago

India suffers from a widespread yes-man culture. Nobody asks questions, everyone claims to understand everything, the reality is they have no clue. Everything that happens, happens for kowtowing and ritual reasons, not because of understanding of what needs to be done and why.

India is largely a cargo cult. Not to the same extent of removedness from reality, but much more widespread and commoditized.

Comment by drutaTushar 1 day ago

there is some truth to it but work culture is not "indian" its mostly product of socialist policies. True Indian nature is actually quite argumentative and asking lot of questions. same person would ask many questions when seeping tea with his colleagues but at work nature is changed. its mostly derived from survival rather than normal organic response and also inability to-do something about thousands of problem he has observed daily

Comment by potamic 1 day ago

I don't think so, I think the roots are deeply cultural. India is a collectivist society where family hierarchy, community loyalty feature strongly, with sayings like "Do not question elders" widely expressed. A lot of this reflects onto work culture as well, among other places, and you see similar things play out across other collectivist cultures as well. So, while arguing with colleagues who are your peers is fine, you will find people will shut down to a large extent when there's hierarchy involved.

To see first hand how this "Do not question authority" plays out, see this every day meeting [1] at one of the largest banks in India. Disclaimer, this video is not AI generated. Sadly it is not even satire.

[1] https://www.youtube.com/watch?v=_SL8-kW7-5A

Comment by lll-o-lll 1 day ago

Really interesting response. Is there really just “one” Indian work culture? India is this massive diverse place; surely there’s going to be very different work culture from workplace to workplace?

Comment by adityaathalye 1 day ago

Strawman argument. Neither socialist nor nationalist nor communist policies at any level---centre or state---have formed "the work culture".

Organisational (mis)behaviour---corporate and government---is simply a product of our widespread and deeply rooted feudal-bureaucratic mindset. One that both fosters and then feeds on the divisive complexities crafted from exploiting age-status, patriarchal conventions, and class and caste and religious and ethnic identities.

We are a sublimely chaotic heterogenous people. The best of us have---through the ages---been finding ways to cooperate and co-exist without giving up what they cherish most about their ways of life. The worst of us manage to always fault someone else for all their troubles, and then further incite others to do the same.

Comment by thewhitetulip 1 day ago

"You don't question the elders" has nothing to do with socialism

Comment by leonidasrup 1 day ago

> Nobody asks questions, everyone claims to understand everything, the reality is they have no clue.

India is so big that, you can not claim this for everyone in India. Counterexamples:

https://en.wikipedia.org/wiki/Subrahmanyan_Chandrasekhar

https://en.wikipedia.org/wiki/C._V._Raman

https://en.wikipedia.org/wiki/Srinivasa_Ramanujan

https://en.wikipedia.org/wiki/Homi_J._Bhabha

Comment by ksh09 1 day ago

They did great for their time.

Glory of the past doesn't exempt the incompetence of the culture present now.

Comment by antonvs 1 day ago

The parent comment said that culture was “widespread”. Your links don’t affect that claim.

Comment by tosstoyevsky 1 day ago

Good point, your 4 Wikipedia links totally disprove the trend.

Comment by alex_smart 1 day ago

If a trend can be established by one data point, surely it can be countered by four?

Comment by soon_to_be_sb 1 day ago

>one data point..

As an Indian, I really wish if this were true...

Comment by mirages 19 hours ago

Outdated. Lots of those sites are serving from the G1 root now, which has not been revoked or compromised yet

Comment by sprinter123 16 hours ago

not outdated, many of these are still serving revoked certificates and I can't load any of them on firefox or a patched curl

Comment by pseudohadamard 12 hours ago

That's a quirk of Firefox. Many (most?) browsers don't check revocations so you can keep using the revoked certs indefinitely. There was a great talk last month at AUSNOG on revocation where he details how much effort he put into getting a revoked cert recognized as no longer valid, without success, https://www.youtube.com/watch?v=YsH63Pr1jrw

Comment by 1 day ago

Comment by baobabKoodaa 1 day ago

It's time to cut the undersea cables

Comment by s-daveb 19 hours ago

... India is surrounded by land too.

Comment by soon_to_be_sb 1 day ago

It happens only in India!

Comment by jnaina 1 day ago

[flagged]