federate.cc
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
uszo165@futurology.today to Open Source@lemmy.mlEnglish · 1 month ago

The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026

media.ccc.de

external-link
message-square
6
link
fedilink
  • cross-posted to:
  • cybersecurity@sh.itjust.works
  • opensource@programming.dev
55
external-link

The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026

media.ccc.de

uszo165@futurology.today to Open Source@lemmy.mlEnglish · 1 month ago
message-square
6
link
fedilink
  • cross-posted to:
  • cybersecurity@sh.itjust.works
  • opensource@programming.dev
In 2025, I found and disclosed a bunch of vulnerabilities in GPG, the most used PGP implementation, and held a talk at 39c3 about it. **S...
alert-triangle
You must log in or # to comment.
  • ikogarane@lemmy.world
    link
    fedilink
    arrow-up
    14
    ·
    1 month ago

    GnuPG is one of those tools I never got around to use. How could something designed for human communication be so utterly cumbersome and confusing ?

    • setVeryLoud(true);@lemmy.ca
      link
      fedilink
      arrow-up
      2
      ·
      1 month ago

      I use it for git commit signing.

      • ikogarane@lemmy.world
        link
        fedilink
        arrow-up
        4
        arrow-down
        1
        ·
        edit-2
        1 month ago

        You can now use SSH keys if you so wish.

        • https://docs.gitlab.com/user/project/repository/signed_commits/ssh/
        • https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification#ssh-commit-signature-verification
    • diaphragmwp@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      If you ignore most of it, it’s actually fine.

  • HelloRoot@lemy.lol
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 month ago

    Very interesting talk, thanks for sharing!

  • doubtingtammy@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    1 month ago

    The collar/padlock is such a good look for a cryptography talk

Open Source@lemmy.ml

opensource@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !opensource@lemmy.ml

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

  • Open Source Initiative
  • Free Software Foundation
  • Electronic Frontier Foundation
  • Software Freedom Conservancy
  • It’s FOSS
  • Android FOSS Apps Megathread

Rules

  • Posts must be relevant to the open source ideology
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • !libre_culture@lemmy.ml
  • !libre_software@lemmy.ml
  • !libre_hardware@lemmy.ml
  • !linux@lemmy.ml
  • !technology@lemmy.ml

Community icon from opensource.org, but we are not affiliated with them.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 559 users / day
  • 2.01K users / week
  • 4.36K users / month
  • 8.6K users / 6 months
  • 2 local subscribers
  • 49.9K subscribers
  • 3.27K Posts
  • 49.8K Comments
  • Modlog
  • mods:
  • Evan@lemmy.ml
  • kevincox@lemmy.ml
  • CrypticCoffee@lemmy.ml
  • Lettuce eat lettuce@lemmy.ml
  • BE: 0.19.12
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org