PSA for macOS users:
1. Apple’s supplied SSL certificate bundle at /etc/ssl/cert.pem still trusts certificates attackers can forge using compromised eMudhra keys.
2. I confirmed this on macOS 26.7.1 and 27.0.1 using Apple’s built-in curl and Git.
3. An attacker intercepting connections from tools using this bundle could replace downloads with malware. With commands like curl … | sh, that malware would execute immediately.
4. Removing the roots that authorize those certificates blocks the tested chains. Both OS updates restored roots I’d previously removed, requiring me to remove them again.
4. I’ve submitted the findings to Apple’s security team and am awaiting their response. In the meantime, you can apply a temporary fix as outlined below.
5. To check and fix your machine, give an agent like ChatGPT/Codex or Claude Code the following prompt:
“Independently verify whether Apple’s /etc/ssl/cert.pem still permits trust in certificates signed with compromised eMudhra keys. If so, back it up and remove the roots enabling that trust, identified by verified SPKI fingerprints. Confirm Apple’s built-in curl and Git reject those chains while ordinary HTTPS still works. Preserve rollback and never disable TLS verification.”
Note that removing these roots can also block legitimate sites. This is a temporary mitigation, not a substitute for a fix from Apple.
I’ll share the script I used in a follow-up post if you’d prefer to use that directly.
Making title insurance waiver permanent is a great step to making homeownership more affordable. Thank you!
Opendoor/Doma is the lowest-cost escrow provider for title waiver closings. We can take on every eligible mortgage refinancing transaction tomorrow.
RESTORING THE AMERICAN DREAM OF HOMEOWNERSHIP. 🇺🇸
President Donald J. Trump is lowering the costs of single-family homeownership & mortgages, & removing unnecessary red tape to make homeownership more affordable for all Americans.
@maelan_sdmr For years, Opendoor's locks used to be notoriously terrible. This has changed. All of our locks are fully digital now and can be opened with our app. This has gone from the number 1 reason people call our support to not even in the top 20.
@lucmatheson@Opendoor Lucas, thank you. I’m grateful for everything you’ve contributed to Opendoor and that you’ll remain involved as an advisor through the transition.
It is difficult to exaggerate the amount of damage done to software by it becoming super easy to spin up a new service.
I wish we could go back to the 2010s and just tell everyone to please stop.
Imagine you own a house and want to replace your oven.
Your architect decides the oven should live in a separate building two ZIP codes away because they're worried the kids might access it too easily from the kitchen.
Then someone decides the spice rack should be in another country because that country has better access to spices.
Now, every time you want to make dinner, you have to coordinate three buildings across two countries.
And when dinner is late, nobody can tell you whether it's the oven, the spice rack, or the car traveling between them that's the issue. them.
That's how most microservices work.
I wrote a book about marriage. Brad wrote a much better one.
There is a reason why we come to work every day at Opendoor. Our job is to tilt the world towards homeowners. This matters. We are working hard to make homeownership just a little easier every day.
Truly devastating news for family formation in America.
Median mortgage payments doubled since just 2020 (!) from
☑️ $1040 in 2020
☑️ $2056 in 2025
This matters because we know the cost of SFHs is a powerful predictor of marriage and childbearing.
Turns out the "experts" were right. In an interesting way.
"Not all that bullish on their prospects as a business case. Tesla's not a car company; they have no expertise in automaking."
Luckily, we actually can go back in time till before these existed. We can go back to let's say to 1835 and read what Tocqueville wrote in Democracy in America re ownership. We also have de-correlated studies on this from the UK. UK's right-to-buy (that allowed people to own the home they were renting) dramatically reduced crime. We also have sibling studies (same family, different siblings, different housing situation). We also have data that shows same effect across different countries (US and Germany) etc.
For millions of American families, rent is an unavoidable predatory and systemic tax on the unestablished or on those whose parents can't gift them a large downpayment.
Opendoor’s job is simple: end this tax.
Very obviously, you are wrong. We have massive amounts of data that ownerhship - like the literal act of ownership - makes families better off, makes neighborhoods safer, and increases lifetime outcomes for children.
Home is not just a financial asset like a bond or a stock. It has broader societal implications.
@rexsalisbury@jacksongates I am pro massive increase in supply. I'm also fine with totally removing demand subsidies if we do the same for rental property and all the tax and government incentives we give that.
We are likely the biggest user of AI in real estate. I can't imagine anyone bigger. But I want you to imagine building a model that can detect the amount of paint required to cover a patch on the wall and whether that patch requires drywall work or not and how many days it will take. That's what our AI scoping does. This isn't easy work.
@stefanomagnoni We'll talk about this a lot later but our requirement for designing this was that the customer would be able to flip this into a mortgage easily and that they would own an actual asset.
New thing I really like ✨. Now, when you share an Opendoor listing that has a video in iMessage, users can auto-preview it right in the message thread.