I guess I picked the wrong week to stop sniffing glue.

Related ongoing thread:

PingCap TiDB Leaks - https://news.ycombinator.com/item?id=50173716 - Oct 2026 (32 comments)

(It had only spent 3 hours on the frontpage so I re-upped it.)

I find it wild how much they have downplayed this in their statement. https://www.pingcap.com/trust-hub/security/security-update-o...

”An external incident response firm reviewed PingCAP’s production systems and found no evidence that the attacker ran commands or maintained persistent access in the systems reviewed”

hmm, I don't think that's true.

That was a single company, the cert problem hit something like 70% of all websites and devices.

Honestly…I’ve never heard of pingcap

Jesus that one is bad