Experts Warn New Bugs Could Expose PGP Emails

PSA PGP and S  MIME are broken and leaking encrypted emails – stop using them right now

Ahead of a full release of details on May 15, European researchers and the EFF are providing an early warning that messages encoded with PGP/GPG and S/MIME are vulnerable to a set of serious security vulnerabilities - an issue impacting over 20 email clients.

The Electronic Frontier Foundation -which researchers contacted to help them broadcast their message to a broader audience- has published tutorials on how to disable email encryption plugins.

Titling the exploit "Efail", they wrote that they had found two ways in which hackers could effectively coerce an email client into sending the full plaintext of messages to the attacker. The digital privacy watchdog also suggested the use of alternatives, such as Signal, for the time being as the implications of the vulnerabilities described in the paper are better understood, and hopefully mitigated, by the cybersecurity community.

The PGP encryption is mostly used by political activists, journalists, and whistleblowers as an extra layer of encryption. In the meantime, they are recommending that users stop using OpenPGP and S/MIME for now.

The attack works by exploiting how email clients read HTML code, researchers said.

A modified encrypted email sent by the attacker to the victim is decrypted by their email client.

The attacker changes an encrypted email in a particular way and sends this changed encrypted email to the victim.

More news: Karnataka polls -Litmus test for BJP and Congress

"Our advice, which mirrors that of the researchers, is to immediately disable and/or uninstall tools that automatically decrypt PGP-encrypted email", the EFF's post said.

"The Efail attacks require the attacker to have access to your S/MIME or PGP encrypted emails", the Efail website FAQ states.

While the requirement that attackers have access to previously sent e-mails is a an extremely high bar, the entire goal of both PGP and S/MIME is to protect users against this possibility.

It added, however, that it considered the encryption standards themselves to be safe if correctly implemented and configured.

The flaws, some of which have existed for more than a decade, are part of a series of vulnerabilities dubbed "Efail". This is then encrypted with the sender's private "key" and decrypted by the receiver using a separate public key.

The team's leader researcher, Sebastien Schinzel, admitted that: "E-mail is no longer a secure communication medium".

To exploit the weakness, a hacker would need to have access to an email server or the mailbox of a recipient.

Related News:

  • Newcastle must keep Benítez, says Lascelles

    Newcastle must keep Benítez, says Lascelles

    He said: "I think this week, maybe there will be another conversation and we will see where we are for the next week". We want to compete and with the right quality and at the right level.
    Wenger era ends at Arsenal amid 'Kroenke you're next' banner

    Wenger era ends at Arsenal amid 'Kroenke you're next' banner

    Wenger says: 'For managers it is more hard today to play young players than it ever has been before. You can't come out and the next morning say I go somewhere else.
    Cowboys DT Maliek Collins suffers broken foot in OTAs

    Cowboys DT Maliek Collins suffers broken foot in OTAs

    Primarily a backup throughout his career, McClain recorded a career-high 39 tackles and 2.5 sacks while starting 15 games in 2016. The Cowboys did not draft a defensive tackle, but did acquire one during the draft by trading for Oakland's Jihad Ward.
  • Italy Populists Close in on Government Pact, Silent on Premier

    Italy Populists Close in on Government Pact, Silent on Premier

    Five Star has also called for a universal basic income scheme for the unemployed, while the League supports a flat income tax. For the composition of the government, the League and M5S must also agree on representation from the parties.

    NBC On Saving 'Brooklyn Nine-Nine': 'We're Thrilled To Have It'

    Fox cancelled Brooklyn Nine-Nine late last week, but less than 24 hours later season 6 had officially been picked up by NBC . The network has trimmed down their primetime line-up significantly to make room for more sports coverage.
    Gotham: Fox Renews Batman Prequel Series for Fifth and Final Season

    Gotham: Fox Renews Batman Prequel Series for Fifth and Final Season

    The O.C.'s Ben McKenzie stars in Gotham as a younger version of James Gordon, who would later go on to become Commissioner Gordon. But here's the rub: This will be the show's final season and will focus on Bruce Wayne's transformation into the caped crusader.
  • Zenit agree Mancini exit as Italy loom

    Zenit agree Mancini exit as Italy loom

    The decision to leave was made some three months ago", he said. "It has nothing to do with the club or the national team". Mancini led City to its first English league title in 44 years in 2012, and won three Serie A titles with Inter Milan.
    Miniature royal wedding made from 60000 Lego blocks

    Miniature royal wedding made from 60000 Lego blocks

    The Royal Windsor Horse Show is the largest outdoor British horse show taking place over the course of several days. Prince Philip was forced to miss the annual Easter mass last month too, which most of the royal family attended.
    IMD predicts rain, squall over next 72 hours

    IMD predicts rain, squall over next 72 hours

    Many houses were razed to the ground, hoardings and trees uprooted and power outages reported from various cities and towns. A sudden dust storm and rain hit several parts of Punjab and Haryana, including Faridabad and Gurgaon, on Sunday evening.
  • Black American bishop will give the address at royal wedding

    Black American bishop will give the address at royal wedding

    Curry spoke in defense of same-sex marriage. "And this conjures that up again, and brings pain". The Instrument of Consent will be presented to the couple after becoming husband and wife.
    Pep Guardiola hails ideal  end to record-breaking season

    Pep Guardiola hails ideal end to record-breaking season

    But they had no intention of letting the impending party distract them on the south-coast. City will celebrate on the streets of Manchester on Monday with an open-top bus parade.
    US Set To Officially Open Its Israeli Embassy In Jerusalem

    US Set To Officially Open Its Israeli Embassy In Jerusalem

    In 1995, Congress passed a law mandating the move of the US embassy to Jerusalem , a law that had the support of both parties. A sign on a bridge leading to the US Embassy compound ahead the official opening in Jerusalem, Sunday, May 13, 2018 .


Most liked

USA high court paves way for states to legalize sports betting
All four major USA professional sports leagues, the NCAA and the federal government had urged the court to uphold the federal law. NY - A 2013 referendum approved sports betting in the state's commercial casinos if it was ever legalized at the federal level.

Sonam Kapoor and Anand Ahuja share adorable pictures from their wedding album
Sonam and Anand were married in a private ceremony on Tuesday, which was followed by a grand Bollywood bash in the evening. Other actresses including Hazel Keech, Sagarika Ghatge and Sonam Kapoor chose to wear red on their wedding day itself.

Kerala woman arrested after confession that daughter was molested with her consent
The Women's Commission chairperson MC Josephine visited the theatre and appreciated the owner for informing the issue to police. Shockingly, as per police report, the man had sexually assaulted the girl while her mother was also present at the place.

NES Classic Edition will return to stores this June
You can play two-player games by getting a second or using a Wii Classic Controller/Classic Controller Pro. The company has also promised to make the SNES Classic Edition available through the end of 2018 as well.

Mercedes-AMG reveals 2019 GT S Roadster
In the standard model, this produces 469 hp and 465 lb-ft of torque, while the C version ups the ante to 550 hp and 502 lb-ft. The acceleration figure matches the GT S coupe though the top speed is 1 miles per hour lower.

Xerox ends Fujifilm deal in win for Carl Icahn
With that behind us and new shareholder-focused leadership in place, today marks a new beginning for Xerox. Despite our insistence, Fujifilm provided no assurance that it will do so within an acceptable timeframe.

IPL 2018: 5 takeaways from Rajasthan Royals' win over Mumbai Indians
During the death overs, Jofra Archer missed a sitter at point as Jaydev Unadkat deceived Ben Cutting with a slower delivery. Mumbai are no strangers to these kinds of situations, as they have made it a habit of coming from behind in previous IPLs.

Houston Astros wear Rockets gear for road trip
D'Antoni was asked if he thinks the Warriors have seen a team as talented and unsafe as the Rockets are this season. Capela has the opportunity to make a name for himself if he can stay active in the paint against Golden State.

Asteroid Possibly Longer Than Football Field Will Soon Have Near-Earth Encounter
People can watch the spectacle on the Internet and the observatories of Northolt Branch in London will broadcast it live. An asteroid of the size of a long football field reportedly would pass right by the Earth at a seemingly closer distance.

Simpson leads Players Championship by seven strokes
I was 14 back starting today and anything inside a top 10 is an incredible feat over the weekend from that far back. Spieth was five under on his round through 11 holes and wondered if he had the low round of the day.

Iraq counts votes as record abstentions hit first post-IS poll
Prime Minister Haider al-Abadi performed poorly across majority Shiite provinces that should have been his base of support. The nationwide popular vote does not directly correspond to the amount of seats each list gains in parliament.

Jacob deGrom 'surprised' he got pulled so early by Mets
Nola has pitched well this year as he has gone 5-1 with a 2.05 ERA on the year, including 4-0 with a 2.17 ERA here at home. It is not the stronger of my two picks in this game, but I feel that the Phillies will find away to win it.

Huddersfield Town 0-1 Arsenal: Poacher Aubameyang gives Arsene Wenger winning send-off
It was understandable as it has been a long season for them and they have been a breath of fresh air in the Premier League . Arsenal sent him out in style in their last home game, thrashing Burnley 5-0 in an appropriately Wenger-ball style.

USC Softball Gets 9 Seed And Will Host NCAA Regional
The Florida softball team will host an NCAA Regional for the 14 consecutive season at Katie Seashole Pressly Stadium. The victor of the Columbia Regional will be matched with the victor of the Arizona State Regional.

Motorola working on a foldable smartphone, files a patent for the device
Just a few months ago, the smartphone community was stunned when Microsoft's patents outlining a foldable mobile device emerged. This will be materialized by 2019 with the foldable smartphone to be released in 2018 to be named Andromeda CShell.