Thursday, 16 August, 2018

Critical vulnerabilities in PGP/GPG and S/MIME email encryption, warn researchers

PSA PGP and S  MIME are broken and leaking encrypted emails – stop using them right now Critical vulnerabilities in PGP/GPG and S/MIME email encryption, warn researchers
Sandra Phillips | 14 May, 2018, 18:13

On Tuesday, a team of researchers are planning to release details of a critical vulnerability which they claim could have serious consequences for internet users who use PGP/GPG to encrypt and decrypt their sensitive email communications.

He said the vulnerabilities "might reveal the plaintext of encrypted emails, including encrypted emails sent in the past" and that there are no current fixes available.

The security flaws that have been discovered could potentially leak the contents of the encrypted messages you send and receive via email when signed with PGP or S/MIME encryption methods.

An EFF advisory says "these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages".

Users should immediately disable or remove any tools that automatically decrypt PGP-encrypted emails until the flaws are understood and fixed, EFF said.

NES Classic Edition Makes A Return To Stores On June 29
Nintendo will also be shipping out an additional wave of Super NES Classic units. 3, Donkey Kong , Balloon Fight and many more. When will the NES Classic be released? These games included such greats as The Legend of Zelda , Super Mario Bros .

Xerox aborts £6.1bn Selling to Japan's Fujifilm
But Icahn and Deason blasted the deal , saying it significantly undervalued the U.S. company and would be its "death knell". Deason said, "Xerox is now positioned to conduct a true, robust strategic alternatives process".

Simon Yates extends Giro d'Italia lead as Chris Froome flops
Yates was part of a five-man group that escaped in the final kilometres of the summit finish and attacked right at the end to edge out Thibaut Pinot.

S/MIME - which is primarily used by corporations to protect the security of their emails - was described as irreparably broken.

The two attacks, details of which were published on Monday in a research paper, affect PGP, the most popular technology for sending encrypted emails. Long term, comprehensively patching this particular vulnerability will require an update to the underlying email encryption standards.

It's believed that the vulnerabilities exist in the email clients themselves, rather than the PGP encryption protocol. Because a full block of plaintext-the researchers cite S/MIME emails starting with "Content-type: multipart/signed" as one-is known to the attacker, this allows the attacker to "repeatedly [append] CBC gadgets to inject an image tag into the encrypted plaintext".

But it said that, correctly used and configured, both forms of encryption remained secure.

PGP, for example, works using an algorithm to generate a "hash", or mathematical summary, of a user's name and other information. To prevent a breach, the BSI said that users needed to secure access to their mailboxes and prevent their email clients from loading HTML code from external websites.

Recommended

Apple faces class action over MacBook keyboard Apple faces class action over MacBook keyboard Unfortunately for Apple , the curious case of the failing MacBook Pro and MacBook keyboards is refusing to go away. The lawsuit further asks for damages and refunds for users who have had to replace their MacBooks's keyboard.

Top Russian, Iranian diplomats to discuss ways of salvaging Iran nuclear deal Top Russian, Iranian diplomats to discuss ways of salvaging Iran nuclear deal As he arrived in Beijing, Zarif said Tehran was "ready for all option (s)", according to the semi-official ISNA news agency. China also committed itself to multilateralism and global agreements.

ROCKETS: ABC13, ABC7 Morning Team Gear Challenge ROCKETS: ABC13, ABC7 Morning Team Gear Challenge The Rockets and Warriors have both cruised through the playoffs at a rapid rate, knocking off their opponents in decisive fashion. The NBA's two best teams will have a chance to duke it out finally to figure out who will represent the West in the NBA Finals.

Sonam Kapoor's wedding was 'the most magical two days' Sonam Kapoor's wedding was 'the most magical two days' But some people are really lucky to have two mothers in their life in the form of a sisters, who always look after them. It's work mode for Sonam Kapoor as she headed to Cannes Film Festival 2018 with her hubby Anand this past weekend.

Ms. Marvel movie may be 'sooner than you think' Ms. Marvel movie may be 'sooner than you think' Marvel Studios president Kevin Feige has confirmed there are "plans" to introduce Ms. If you don't know the name Kamala Khan , you're missing out.

Hollywood Take on "Monster Hunter" Enters Production This September Hollywood Take on Not much is known about the film right now, although presumably it will involve a bunch of people hunting monsters. Variety reports that the production company will be rejoined by many who have worked on the Resident Evil series.

Italy's M5S and League parties poised to name a prime minister Italy's M5S and League parties poised to name a prime minister Salvini and Di Maio are scheduled to meet again in Rome on Monday before being received at the Quirinal, the presidential palace. Di Maio and Salvini could serve as deputy premiers, with Di Maio also as foreign minister and Salvini as interior minister.

Juventus win Serie A Juventus win Serie A Roma played the final twenty minutes a man down after Radja Nainggolan was sent off for a second yellow card after a foul on Argentina striker Paulo Dybala.

Is Walmart chasing a mirage in Flipkart with the $16-billion acquisition? Is Walmart chasing a mirage in Flipkart with the $16-billion acquisition? This investment will be made by Walmart purchasing new shares of Flipkart at the same price as the acquisition transaction. Post the Walmart-Flipkart, SoftBank reportedly had a second thought about selling its entire Flipkart stake to Walmart.

AMG GT Roadster range expands with 384kW 'S' AMG GT Roadster range expands with 384kW 'S' The acceleration figure matches the GT S coupe though the top speed is 1 miles per hour lower. Pricing will be announced closer to launch.

Who will emerge victorious in 2018 Karnataka assembly election? No clear victor Who will emerge victorious in 2018 Karnataka assembly election? No clear victor In 2005, former Prime Minister Gowda had expelled Siddaramaiah from JD (S) and it was then that Siddaramaiah joined Congress. Votes will be counted on Monday and exit polls and other surveys have often been wrong in India.

Simpson ties course record, takes 5-shot lead Simpson ties course record, takes 5-shot lead As far as Spieth is concerned, improvement with putter in hand will trigger the kind of spectacular run he is capable of. I think I was ideal inside of 10 to 15 feet today and anywhere inside, which was probably the first time this year.

Nawaz Sharif 'Speaking Modi's Words' On Mumbai Attacks: Top 10 Developments Nawaz Sharif 'Speaking Modi's Words' On Mumbai Attacks: Top 10 Developments Leader of the opposition, Sherry Rehman on Sunday slammed Nawaz Sharif for his recent remarks on the Mumbai attacks . Meanwhile, Sharif's younger brother Shahbaz Sharif said that media misrepresented views of the former prime minister.

Benitez calls for united front at Newcastle Benitez calls for united front at Newcastle He said: "I think this week, maybe there will be another conversation and we will see where we are for the next week". Benitez is hoping for a £50million transfer pot this summer, and could spend more if he sells.

Prince Philip seen for the first time since hip replacement surgery Prince Philip seen for the first time since hip replacement surgery Philip, 96, has been ensconced in his Windsor Castle home with the Queen since leaving hospital in London on 13th April. The young royal inherited a love of horses from her grandmother the Queen, 91, and was taught to ride at a young age.