They then go on to describe obvious, well-known ciphertext malleability attacks that are already solved in GPG with what are basically MACs, and just mishandled by some clients. "OMG GPG IS BROKEN".... yeah, not so much.
Show this thread
Called it. This is beyond stupid. And yet *another* example of clickbait, shitty disclosure, and other nonsense from academic security research. Shame. https://twitter.com/marcan42/status/995938014390992896 …pic.twitter.com/STXrDaKeMO
-
-
-
Also, Enigmail 2.x is fine. So much FUD, so little substance.https://twitter.com/robertjhansen/status/995970938628952064 …
Show this thread
End of conversation
New conversation -
-
-
clever though
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I like how they say their embargo was broken when they partially disclosed it on theirbown to hype stuff up. (And didn't tell GPG?)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.