home.social

#gpgfail — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #gpgfail, aggregated by home.social.

fetched live
  1. FreePG Project @[email protected] ·

    #GnuPG 2.2.53-freepg has been released.

    It contains all the latest bug fixes from upstream GnuPG, plus the usual FreePG patches.

    In addition, a fix for the default filename path traversal issue identified by #gpgfail has been backported from upstream 2.5.16 (gpg.fail/filename)

    gitlab.com/freepg/gnupg/-/rele

    #gnupg #gpgfail
  2. Lars Fischer @[email protected] ·

    Aufgrund der schwerwiegenden Sicherheitslücken die unter gpg.fail aufgeführt sind, habe ich mich heute gezwungen gesehen eine Warnung vor GnuPG in meinem Tutorial anzubringen.
    informatik.hs-bremerhaven.de/l

    Als wirklich langjähriger Nutzer von GnuPG und aktiver Don Quichotte für Email-Verschlüsselung und -Authentizität finde ich das eine sehr betrübliche Situation.

    Nach Alternativen für meine Toolchain schaue ich mich gerade um. Erster Kandidat ist #sequoia (sequoia-pgp.org/). Und auf den ersten Blick bin ich schon mal davon erfreut, dass ich dort DANE direkt unterstützt sehe.

    Kann jemand andere OpenPGP-Werkzeuge empfehlen? Und warum?

    #gpgfail

    #sequoia #gpgfail
  3. FreePG Project @[email protected] ·

    #GnuPG 2.4.9-freepg has been released.

    It contains all the latest bug fixes from upstream GnuPG, plus the usual FreePG patches.

    In addition, a fix for the default filename path traversal issue identified by #gpgfail has been backported from upstream 2.5.16 (gpg.fail/filename)

    gitlab.com/freepg/gnupg/-/rele

    #gnupg #gpgfail
  4. Delta Chat @[email protected] ·

    @jan once details are published, and #39c3 is over, well take another look. But note that #deltachat's usage of #openpgp is intentionally minimal. #Gpgfail is a lot about failures of signature verification, and parsing problems in the gpg c-implementation but #deltachat doesn't use these mechanisms or code at all. The @rpgp folks are still studying the details, and there might be issues, so maybe also follow them for more details. Again, this doesn't affect deltachat as things stand.

    #39c3 #deltachat #openpgp #gpgfail
  5. Delta Chat @[email protected] ·

    Relax 😎! GPG is not OpenPGP!

    Yesterday, vulnerabilities were published gpg.fail but they don't affect #deltachat or other #chatmail clients because

    A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.

    B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)

    Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

    #deltachat #chatmail #gnupg #rustlang #openpgp #rfc9580
  6. Euph0r14 @[email protected] ·

    The #39c3 #gpgfail VOD is now live!

    Truly insane to have so many exploits, and that there are several wontfix

    media.ccc.de/v/39c3-to-sign-or

    #39c3 #gpgfail
  7. Nicole ‘dyfa’ Britz @[email protected] ·

    Zero day… all those patches seem so far away… #gpgfail #39c3

    #gpgfail #39c3
  8. atopia @[email protected] ·

    A lot of us have have been complaining about GnuPG for years but gpg.fail/ takes no prisoners on all sides🔥

    #39c3 #gnupg #gpgfail #sequoiapgp

    #39c3 #gnupg #gpgfail #sequoiapgp
  9. Raúl Nanclares 🍜 @rnanclares ·

    Hey! Long time no see!

    #googleearthpro #gpgfail