Lmst

🔒 I waited 4 years for Mailfence. Here's why it failed:

99% of emails unencrypted (manual PGP setup required, zero user guidance)
Closed-source = zero verification
No E2EE for calendar/contacts
OpenPGP EFAIL vulnerabilities remain exploitable
Metadata still fully exposed

EU jurisdiction ≠ cryptographic protection.
Privacy theater is still theater. You deserve better.
Full technical analysis: https://open.substack.com/pub/kaifisahil/p/i-waited-4-years-for-mailfence-heres?r=6p8e80&utm_campaign=post&utm_medium=web&showWelcomeOnShare=true

#Privacy #EmailSecurity #OpenPGP #EFAIL #InfoSec #PrivacyTools

E-Mails: Not Safe For Work?

Was ist, wenn deine E-Mails nicht so sicher sind, wie du denkst? Schonmal vom #EFAIL gehört? Denn auch Ende-zu-Ende-Verschlüsselungen können geknackt werden. David und Béla erklären das in #Softwarekatastrophen
17.2. 9 Uhr

https://www.campusradio-karlsruhe.de/2023/02/16/e-mails-not-safe-for-work/

Ein junger Mann sitzt im Gegenlicht seines Monitors vor dunklem Hintergrund.
Schriftzug: EFAIL

@laplace You can, but to a point #EFAIL (https://efail.de/) has demonstrated why that's a brittle way to handle the issue.

There are also other issues with #GPG's quality as a cryptographic implementation (part of those design flaws being inherent to #PGP).

I haven't given its code enough of a look-over, but #NNCP (https://nncp.mirrors.quux.org/) seems like a viable method (https://nncp.mirrors.quux.org/UsecasePOP.html) that is also simpler (https://www.complete.org/nncp/).

#email #AsynchronousCommunication

It's been 3 years since the #EFAIL disclosure, and I'm still impressed with the attack.

Sicherheitslücke: Angreifer können verschlüsselte PDF-Daten leaken www.golem.de/news/sicherheitsl… #PDF #Datensicherheit #Efail #Passwort #Sicherheitslücke #Verschlüsselung #Server #Technologie #Security

After #CCCamp19, I made some important #OpenPGP / #EFail related security fixes to the #Mailpile master branch and nightly packages.

I blogged about the what and the why, here: https://www.mailpile.is/blog/2019-08-31_CCCamp_EFail.html

Today's #35C3 talk recommendation is rather technical: "Attacking end-to-end email encryption" -- #EFail explained:
https://media.ccc.de/v/35c3-9463-attacking_end-to-end_email_encryption

I’m the Signal Angel for the #35c3 #hallA talk “Attacking end-to-end email encryption” about #efail. If you have questions for the speaker please mention me/use the hall hashtag and I’ll relay the during Q&A.

Tenemos un nuevo concierto de Leiva en sevilla, quereis ver la previa?

https://youtu.be/NuwtNkvbCZk

#nodejs #efail

Productora de eventos en Madrid
de la mano de https://www.betheflowevents.com/

#nodejs #efail

@varx I just got reminded of it recently thanks to #Efail.

@bob @dredmorbius @QuantumHemp #Efail was a storm in a teacup. I was disappointed to see a lot of people who normally say sensible things about security getting over-excited about it.