Write a comment

A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. These vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages.

A group of European security researchers have released a warningabout a set of vulnerabilities affecting users of PGP and S/MIME. The Electronic Frontier Foundation (EFF) says it has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages.

The full details of the vulnerability will be published in a paper tomorrow (Tuesday, 15 May, at 3:00 a.m. EST, midnight Pacific).

EFF says that in order to reduce the short-term risk, EFF the researchers have agreed to warn the wider PGP user community in advance of the full publication of the vulnerability.

EFF and the researchers urge users to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email.

For a detailed discussion of the vulnerability and how to minimize the risk it entails, see Erica Portnoy, Danny O’Brien, and Nate Cardozo, “Not So Pretty: What You Need to Know About E-Fail and the PGP Flaw” (EFF, 14 May 2018).

Until the flaws described in the paper are more widely understood and fixed, users should arrange for the use of alternative end-to-end secure channels, such as Signal, and temporarily stop sending and especially reading PGP-encrypted email.

Users should refer to these guides on how to temporarily disable PGPplug-ins in:

Thunderbird with Enigmail

Apple Mail with GPGTools

Outlook with Gpg4win

EFF notes that these steps are intended as a temporary, conservative stopgap until the immediate risk of the exploit has passed and been mitigated against by the wider community.

 

Loading comment... The comment will be refreshed after 00:00.

Be the first to comment.

Say something here...
You are a guest ( Sign Up ? )
or post as a guest

 

 

 

Latest

5 Comments

It's Official: British Prime Minster to Face No-Confidence Vote TODAY

December 12, 2018
4 Comments

British Prime Minister to be OUSTED in "No-Confidence" Vote

December 11, 2018
1 Comment

South Atlantic Ocean Gets Major Earthquake

December 10, 2018
5 Comments

Maduro warns of US plot to overthrow Venezuela government

December 10, 2018
Write a comment

REPORTS: MISSILE ATTACK AGAINST DAMASCUS AIRPORT

December 09, 2018
2 Comments

Yellowstone Geyser: "Off the charts" with steam eruptions

December 06, 2018
Write a comment

Sale

December 05, 2018
1 Comment

Wintry Mess to Spread Snow, Ice From Southern Plains, Southeast to East Coast Late This Week into Next Weekend

December 03, 2018
8 Comments

VIDEO: S-300 Air Defenses Deploying in Odessa Ukraine for Russia WAR

December 02, 2018
28 Comments

Whack-job in Cleveland Complains about Christmas Song - Radio station folds like a cheap camera - pulls the Dean Martin song!

December 01, 2018
21 Comments

VIDEO! NATO Moving Tanks into Ukraine via Poland - Preparing for WAR with Russia

November 30, 2018
13 Comments

Canada OUTLAWS the mailing of Precious Metals

November 30, 2018
13 Comments

NOW AFRICA HIT WITH M7.0 EARTHQUAKE !

November 30, 2018
7 Comments

MASSIVE EARTHQUAKE SMASHES ANCHORAGE - TSUNAMI WARNINGS ISSUED

November 30, 2018
4 Comments

Saudi Military Re-Deployed to Capital; Deter COUP of King and Crown Prince

November 30, 2018
9 Comments

ISRAEL ATTACKS SYRIA (AGAIN) - FAILS

November 30, 2018
16 Comments

WAR Being Planned by US for Ukraine/Russia - Job Ads seek "Combat Zone" Workers for "Classified Operations" with US Military in Ukraine

November 29, 2018
14 Comments

UH Oh! Ukraine Asks Turkey To BAR Russian Military Vessels From Bosphorus Strait "Time of War"

November 29, 2018
16 Comments

Red Laser Dots Float on President Trump’s Chest and Face During White House Speech

November 29, 2018
6 Comments

Audio Archive Nov. 28, 2018

November 28, 2018