Episode 368: EFail Explained
The EFail hype-train has hit hypersonic speed, we’ll tap the breaks and explain who disclosed it, what it is, what it’s not, our recommendations, and early reactions.
May 15, 201836m 47s
Audio is streamed directly from the publisher (aphid.fireside.fm) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
The EFail hype-train has hit hypersonic speed, we’ll tap the breaks and explain who disclosed it, what it is, what it’s not, our recommendations, and early reactions.
Plus things to consider when deciding on-premises vs a cloud deployment, and the all business gadget from 1971 that kicked off the consumer electronics revolution.
Links:
- The HP-35 — Consumer Electronics, an Origin Story
- The people cost of building out a Kubernetes cluster on-prem | Operos
- EFAIL — EFAIL describes vulnerabilities in the end-to-end encryption technologies OpenPGP and S/MIME that leak the plaintext of encrypted emails.
- efail-attack-paper.pdf
- GnuPG Efail press release Response
- No, PGP is not broken, not even with the Efail vulnerabilities - ProtonMail Blog — Recently, news broke about potential vulnerabilities in PGP, dubbed Efail. However, despite reports to the contrary, PGP is not actually broken, as we will explain in this post.
- Eric's War Story is VERY Familiar
- When it rains it pours for Steve
- Critical Cisco WebEx Bug Allows Remote Code Execution
- Cisco WebEx and 3rd Party Support Utilities