GPZ> So we found these vulns related to CPU specula- Academia> ME ME ME TOO ALSO HERE'S A NAME AND A LOGO THE WORLD IS ENDING!!! Cure53> So Enigmail has some issue- Academia> OMG PGP IS DEAD EVERYONE STOP USING IT NOW ALSO NAME AND A LOGO!!! Starting to notice a pattern here.
-
When you simplify it to “active content” you do a disservice to both the cryptographic sophistication of the attack AND the severity of the vuln (particularly for S/MIME). This is why things don’t ever get fixed.
I'm not considering S/MIME here at all since most of the FUD seems to be about PGP. I couldn't care less about S/MIME and have not analyzed that vector.
-
-
The PGP vector is bad enough.
-
Also: let me be clear. “I can fully decrypt your encrypted PGP emails with almost no user interaction” is not FUD. If you doubt the vuln exists, say so. But don’t say it’s not extremely serious for a crypto vuln.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.