Top Tweets for #eFail
Menschen, E-Mails, Emotionen: Die neue Folge "House of Nerds" ist da! Dieses Mal mit dem Verschlüsselungsexperten Sebastian Schinzel. Er spricht über die Sicherheitslücke #Efail und für ihn überraschend emotionale Reaktionen auf die Veröffentlichung.
https://t.co/UmxQ9XgyVL
Cuando el online store no tiene a PR ni como estado, ni como pais... 😳 #EFail
New paper on how to fix #efail style attacks against e2e encrypted email, including OpenPGP and S/MIME. Joint work with @JoergSchwenk @lambdafu @dues__ @jensvoid @jurajsomorovsky @seecurity. To be presented at @acm_ccs 2020. Thread:
#Efail Isaf - A beautiful pupil lead worship about the importance of forgiveness.
Learning about research is always the most exciting when taught directly by the original authors: @jurajsomorovsky, thank you for an interesting and entertaining Christmas guest lecture about the ideas behind the famous #efail attack in my IT Security course at @Uni_Wuppertal!
New paper: "Re: What's up Jonny, Covert Content Attacks on Email End-to-End Encryption" to appear in ACNS 2019. Joint work with @jensvoid @lambdafu @dues__ @JoergSchwenk https://t.co/eMI4HsiZh1
The #Efail attack? Interface break (and a bad one). Had no effect on the OpenPGP protocol.
If I could give security developers one bit of hard-learned advice from Enigmail: pay attention to your friction points and minimize them whenever possible. 7/
If you use S/MIME, update Thunderbird. Here's yet another way to exfiltrate the plaintext of encrypted emails in the never-ending post-#EFAIL arms race... https://t.co/Uw2YEIqOQT (CVE-2019-11739)
Sicherheitslücke #PDFex bei verschlüsselten PDF-Dateien entdeckt - Wir klären auf, für wen welche Risiken tatsächlich bestehen und wer betroffen ist. Bei besonderen Sicherheitsanforderungen zeigen wir Alternativen. #efail #encryption https://t.co/hev0xCDvKd
@acm_ccs @jensvoid @Murgi @v_mladenov @CheariX @JoergSchwenk As with #efail, there are 2 different versions of #PDFex: dirext exfiltration and CBC gadgets. The first surrounds the ciphertext with an image HTTP URL or a PDF form submitting the decrypted content to the attackers server. #PDFex 4/n
@martynschmoll No mention of #AV's trying to cope w/ #bicyclists. Major problem. Big omission in this article.
#jaywalking #selfdrivingcars #uber #lyft #zombiecars #auto #cartopoli #cycling #biking #activetrans #visionzero #sharetheroad #visionzero #toro! #pollution #congestion #AV_virus #efail
@AndreaBarisani @FiloSottile @latacora Sure. A big step would be if MUA vendors agreed to restrict themselves on a safe subset of MIME features. But I don't see this happen. In fact, I don't even see them implement the AES-GCM support in S/MIME 4.0, which would fix the #EFAIL gadget attacks. Most don't seem to care.
Last year @robertjhansen chastised #EFAIL researchers for recommending to stop using #OpenPGP due to decryption oracles. Now he says to stop using the keyservers due to DoS attacks. I guess that's progress, but it's sad to watch OpenPGP's steady decline due to trivial bugs.
I have more to say on the certificate spamming that's been directed against Daniel Kahn Gillmoor and myself. The executive summary is attached here as a screenshot: click the link to see the whole thing.
https://t.co/P7OSVmLixZ
Most Popular Users
Elon Musk 
@elonmusk
241M followers
Barack Obama
@barackobama
119.2M followers
Cristiano Ronaldo
@cristiano
112.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.1M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.3M followers
KATY PERRY
@katyperry
88.6M followers
Taylor Swift
@taylorswift13
82.5M followers
Lady Gaga
@ladygaga
74M followers
Virat Kohli
@imvkohli
71.3M followers
Kim Kardashian
@kimkardashian
70.2M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.4M followers
Neymar Jr
@neymarjr
64.2M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.7M followers
X
@x
60.8M followers