3 ms·
Perhaps you missed this https://news.ycombinator.com/item?id=37608110 https://news.ycombinator.com/item?id=37608110 but it has given me fresh, sceptical, eyes w
by mrintegrity 3y ago
Perhaps you missed this https://news.ycombinator.com/item?id=37608110 https://news.ycombinator.com/item?id=37608110 but it has given me fresh, sceptical, eyes with which to read cve reports.
- fmajid 3y agoYes, I subscribe to Daniel Stenberg's RSS feed and have seen his many articles bemoaning excessive classification of bugs as vulnerabilities. One of these bugs, however, show serious cryptographic deficiencies. Unfortunately there are a lot of cryptography amateurs making stuff without a proper understanding ond making grandiose claims, so my default stance is one of skepticism unless reputable cryptographers have looked at it. I use wormhole-william, the Go version of the Python magic wormhole, and age, mostly because of this Latacora endorsement: https://www.latacora.com/blog/2019/07/16/the-pgp-problem/ https://www.latacora.com/blog/2019/07/16/the-pgp-problem/