This sounds like multiple RCE issues in common PGP and S/MIME software, but the details are vague so far. Or it could be a side channel issue. Hmm.https://twitter.com/EFF/status/995906839958061056 …
-
This Tweet is unavailable.
-
It's starting to sound like something vaguely like this.https://twitter.com/marcan42/status/995927710537928704?s=19 …
I'm confused as to how it works as a purely application side issue and lets you potentially decrypt past mail without any flaws in @gnupg per se though, where failure to decrypt is part of the problem. The guessing game is getting strange.
