You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Yet another "GPG bug" that isn't *really* a GPG bug... The app let's you specify a status fd and people pass in "2" and mix it up with stderr? Does *anyone* downstream in the PGP ecosystem understand basic security hygiene? https://neopg.io/blog/gpg-signature-spoof/#proof-of-concept-ii-signature-and-encryption-spoof-enigmail …
Seriously, the status-fd interface may be crappy and archaic, but first ignoring exit codes and now this. I don't know about upstream GPG, but all this is doing is making me conclude that the people actually using it and writing tools around it shouldn't be doing that.
urgh... This is also horrific... my terminal is not (ever?) white... perhaps GPG should encode newlines in the output, or ban "filenames" with `\ngpg:` in them.pic.twitter.com/o9PYAwJjzl
Yeah, allowing control characters is kind of broken, but the real root cause for the signature bypass here is mixing an untyped text output stream with machine parsable stream.
Please read the last 3 parapgraphs in @matthew_d_green summary of what's wrong with #OpenPGP. GnuPG's announcement did nothing to help understanding in the community, that's why I actually went through the clients and reported issues. #leadership #sigspoofhttps://twitter.com/matthew_d_green/status/996371541591019520 …
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
