Aaron Mulder on 14 May 2018 07:46:12 -0700 |
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
Re: [PLUG] Heads-up, PGP/GPG users: critical security flaw, disable it in email clients NOW |
If I'm reading the EFF alert right, it does seem like the critical problem is the ability of an HTML e-mail to submit it's own content to a remote destination silently and automatically when you open it. Thanks, Aaron On Mon, May 14, 2018 at 10:40 AM, Matt Berlin <arkestra@gmail.com> wrote: > Should read "HTML Email Client Flaw"... > > > Matthew Berlin > matt@psofe.com > 553 Noble Road > Atglen, PA 19310 > (484) 832-1055 > > On Mon, May 14, 2018 at 10:25 AM, Rich Kulawiec <rsk@gsp.org> wrote: >> >> Brief analysis: >> >> Not So Pretty: What You Need to Know About E-Fail and the PGP Flaw >> >> https://www.eff.org/deeplinks/2018/05/not-so-pretty-what-you-need-know-about-e-fail-and-pgp-flaw-0 >> >> Authors' site with link to full paper: >> >> EFail >> https://efail.de/ >> >> I haven't had time to do more than skim both articles, but will read the >> full paper later today. >> >> ---rsk >> >> >> ___________________________________________________________________________ >> Philadelphia Linux Users Group -- >> http://www.phillylinux.org >> Announcements - >> http://lists.phillylinux.org/mailman/listinfo/plug-announce >> General Discussion -- >> http://lists.phillylinux.org/mailman/listinfo/plug > > > > ___________________________________________________________________________ > Philadelphia Linux Users Group -- http://www.phillylinux.org > Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce > General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug > ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug