They clearly forgot the first rule of recursion: define the base case to prevent infinite recursion.
Signal is broken, please switch to PGP!!!!1! https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injection/advisory/ … PGP is broken, please switch to Signal!!!!1! https://www.eff.org/de/deeplinks/2018/05/attention-pgp-users-new-vulnerabilities-require-you-take-action-now … So how about we just fix the bugs and move on? Anyone? Maybe? Pretty please?
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Doesn’t “earn” as many clicks
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
What I don't understand is, given everything they published, it would've been a good start to just disable automatic decryption and automatic external resources. Or HTML mail in general. Wasn't there a thing that you weren't supposed to use HTML mail with PGP to start with? Sigh.
-
Also, VERY suspicious that this is on a Kraut domain. Their government is notorious for trying everything they can to get a backdoor to user data. Wouldn't put it past them to do this just as a smear campaign so users associate "PGP" with "insecure".
End of conversation
New conversation -
-
-
counterpoint: Signal Desktop is very badly designed and it's likely we'll see an XSS in the future. GPG doesn't have PFS and has lots of backwards-compatibility cruft. Signal is better suited for encrypted communications (which is what this issue was about)
-
that being said, i think "panic-remove PGP and S/MIME" was for sure the wrong decision
- Show replies
New conversation -
-
-
Have you checked out this. https://brax.me
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Except that PGP isn't broken, only the implementation in some e-mail clients is. People claiming that the PGP/GPG protocol is broken don't know/understand a damn thing.
-
Most people don't understand anything tbh So they ready something that says broken and then they freak out
- Show replies
New conversation -
-
-
Signal is fundamentally broken on account of being associated with Moxi.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.