Write a comment

A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. These vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages.

A group of European security researchers have released a warningabout a set of vulnerabilities affecting users of PGP and S/MIME. The Electronic Frontier Foundation (EFF) says it has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages.

The full details of the vulnerability will be published in a paper tomorrow (Tuesday, 15 May, at 3:00 a.m. EST, midnight Pacific).

EFF says that in order to reduce the short-term risk, EFF the researchers have agreed to warn the wider PGP user community in advance of the full publication of the vulnerability.

EFF and the researchers urge users to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email.

For a detailed discussion of the vulnerability and how to minimize the risk it entails, see Erica Portnoy, Danny O’Brien, and Nate Cardozo, “Not So Pretty: What You Need to Know About E-Fail and the PGP Flaw” (EFF, 14 May 2018).

Until the flaws described in the paper are more widely understood and fixed, users should arrange for the use of alternative end-to-end secure channels, such as Signal, and temporarily stop sending and especially reading PGP-encrypted email.

Users should refer to these guides on how to temporarily disable PGPplug-ins in:

Thunderbird with Enigmail

Apple Mail with GPGTools

Outlook with Gpg4win

EFF notes that these steps are intended as a temporary, conservative stopgap until the immediate risk of the exploit has passed and been mitigated against by the wider community.

 

Loading comment... The comment will be refreshed after 00:00.

Be the first to comment.

Say something here...
You are a guest ( Sign Up ? )
or post as a guest

 

 

 

Latest

5 Comments

RESTRICTED INTELLIGENCE

November 11, 2018
14 Comments

Given the US Political Situation, Some Refresher Training seems to be in order:

November 10, 2018
1 Comment

Measles "Outbreak" in Lakewood, NJ

November 09, 2018
Write a comment

Major Earthquake in far north Atlantic Ocean; M6.8

November 08, 2018
13 Comments

URGENT: PUTIN ALLEGEDLY TO CANCEL MEETING WITH TRUMP IN PARIS

November 06, 2018
15 Comments

ELECTION DAY - WILL YOU CHOOSE TO CONTINUE FIXING THE COUNTRY, OR WILL YOU GO BACK TO THE FAILED POLICIES OF THE PAST?

November 06, 2018
Write a comment

MULTIPLE TORNADOES ON THE GROUND IN LOUISIANA

November 05, 2018
13 Comments

PRESIDENT TRUMP WARNS ILLEGAL VOTERS "YOU WILL BE PROSECUTED"

November 05, 2018
10 Comments

Russia Massing War Ships Off Syria Coast - Possible Mass-Attack Upon Idlib Planned after numerous cease-fire Violations

November 05, 2018
Write a comment

NYPD Bomb Squad Called Over GRENADES Found in Brooklyn

November 05, 2018
4 Comments

Today, Nov. 5, U.S. Sanctions Resume Upon Iran

November 05, 2018
11 Comments

REPUBLICANS SHOULD BE CONFIDENT FOR MID-TERM ELECTION RESULTS

November 04, 2018
7 Comments

U.S. Service Member (Former Utah Mayor) KILLED in Afghanistan "Insider Attack"

November 03, 2018
9 Comments

NYPD releases photo of 'White Nationalist Nazi Republican' who sprayed graffiti in Synagogue - SPOILER: It's a black Democrat!!

November 03, 2018
9 Comments

ISIS Unleashes Ferocious Offensive in Syria; U.S. Air Strikes "Ineffective"

November 03, 2018
Write a comment

TORNADO WARNING, CENTRAL NEW JERSEY

November 03, 2018
1 Comment

Google, Facebook, Twitter Hit With MAJOR Election Law Violation Complaint

November 03, 2018
5 Comments

Top U.S. Commander in Afghanistan: "Taliban Cannot be Defeated"

November 02, 2018
4 Comments

Woman Who Claimed Judge Kavanaugh RAPED Her, Now Admits She Never Met Him

November 02, 2018
4 Comments

Let Bloomberg Do For America, What He Did for New York City: BANKRUPTCY ALERT

November 02, 2018