You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
A new security vulnerability has been discovered in PGP (and GPG) that affects a range of email clients and plugins. To protect yourself, EFF highly recommends that for now you uninstall or disable your PGP email plug-in. #efail 1/4https://www.eff.org/deeplinks/2018/05/attention-pgp-users-new-vulnerabilities-require-you-take-action-now …
Here are instructions for disabling the Enigmail or GPGTools plug-ins in some common email clients: Thunderbird: https://www.eff.org/deeplinks/2018/05/disabling-pgp-thunderbird-enigmail … Apple Mail: https://www.eff.org/deeplinks/2018/05/disabling-pgp-apple-mail-gpgtools … Outlook:https://www.eff.org/deeplinks/2018/05/disabling-pgp-outlook-gpg4win …
More details about the vulnerability will be made public on 2018-05-15 07:00 UTC. We will release more explanations and analysis then.https://twitter.com/seecurity/status/995906576170053633 …
For now, do not decrypt encrypted PGP messages that you receive using your email client. Instead, use non-email based messaging platforms, like Signal, for your encrypted messaging needs.
EFF took a close look at the #efail PGP vulnerability. Here’s how it works in plain-as-possible language, and why we’ve recommended—for now—users disable PGP email plugins.https://www.eff.org/deeplinks/2018/05/not-so-pretty-what-you-need-know-about-e-fail-and-pgp-flaw-0 …
...WHAT?
Like others stated it's a vulnerability in some email clients, not in GPG itself. I expected much more of @EFF, this misinformation is very disappointing.
Ainda bem que não uso PGP e meus emails são todos inseguros kkkkk
por vacuidade nem precisa se preocupar kkkk
Eles recomendam desinstalar o PGP (recomendação estranha anyway), isso já fiz!
Lessons learned from #efail:
* Using HTML mail undermines encryption
* Use text mode for emails if encryption is important
* Don't panic and read more than the headlines
* End-to-end encryption comprises client software
@threadreaderapp unroll this please
Nice backdoor...
what is interesting is that the vulnerability caused by a bad implementation of the PGP paper from pgp/openGPG clients. clients like protonmail are not affected since they implemented PGP with love.
Using @Protonmail for 2 years now. I'm pretty amazed by it.
Disappointed in the EFF over this vuln hype. You hurt your trustworthiness by playing into this petty, hyped, and inaccurate disclosure
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
