Mike Gerwitz's GNU Social Instance
  • Login
  • Public

    • Groups
    • Recent tags

Notices tagged with pgp

  1. codesections (codesections)'s status on Tuesday, 03-Sep-2019 12:21:58 UTC codesections codesections
    • Rémi Letot

    @RLetot

    >>> I've always thought that #pgp was pretty good, but…
    >> (I'm slightly disappointed that, of all the many replies I got to the above toot, *none* of
    them were "I see what you did there")
    > Hmm, would you care to enlighten us?

    (PGP stands for Pretty Good Privacy, and I was saying it was "pretty good". It wasn't all that funny to begin with, and much less so now that it's explained!)

    Tuesday, 03-Sep-2019 12:21:58 UTC from fosstodon.org permalink
  2. codesections (codesections)'s status on Monday, 02-Sep-2019 21:31:56 UTC codesections codesections
    in reply to

    > I've always thought that #pgp was pretty good, but…

    (I'm slightly disappointed that, of all the many replies I got to the above toot, *none* of them were "I see what you did there")

    Monday, 02-Sep-2019 21:31:56 UTC from fosstodon.org permalink
  3. codesections (codesections)'s status on Thursday, 29-Aug-2019 14:35:51 UTC codesections codesections

    I've always thought that #pgp was pretty good, but I just came across this seemingly reasonable article that is *very* critical of it: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html

    The tldr:

    * pgp has weak security options and code complexity for backwards compatibility with the 90s

    * because of that, pgp is really easy to misconfigue with poor security

    * pgp doesn't provide forward secrecy

    * pgp encourages you to have one master key that you never change, instead of rotating

    Any thoughts/rebuttals?

    Thursday, 29-Aug-2019 14:35:51 UTC from fosstodon.org permalink
  4. Mike Gerwitz (mikegerwitz)'s status on Saturday, 16-Feb-2019 05:03:40 UTC Mike Gerwitz Mike Gerwitz
    My defense of #PGP against the latest FUD article on HN:

    https://news.ycombinator.com/item?id=19177064

    I feel like most times I respond to something on HN it's because I don't give myself a cooldown period. Unfortunately, things on HN don't last long on the front page, so it incentivizes haste replies, or else people will never see the thread again. And that reduces discussion quality. I'm not pleased with the tone of my reply.
    Saturday, 16-Feb-2019 05:03:40 UTC from web permalink
  5. Björn Schießle 🌍 🇪🇺 (bjoern)'s status on Tuesday, 15-May-2018 07:33:48 UTC Björn Schießle 🌍 🇪🇺 Björn Schießle 🌍 🇪🇺

    Looks like I'm using the right email clients, via https://soc.freedombone.net/notice/478284

    https://mastodon.social/media/S7YNEi9NWKa7DPY7j2M

    #efail #pgp #gnupg #gpg

    Tuesday, 15-May-2018 07:33:48 UTC from mastodon.social permalink
  6. Alex (arx)'s status on Monday, 14-May-2018 12:39:06 UTC Alex Alex

    I don't get it... this #efail / #gpg / #pgp / #smime thing is all over German media (e.g. here: http://www.tagesschau.de/inland/e-mail-verschluesselung-101.html) even though it is totally irrelevant for 99% of people, as almost no one is using PGP encryption for his/her mails anyways and the few that do will most likely have disabled HTML emails (or at least loading of remote content).

    It would be much more proportional to write a *shocker* article every single day about how almost all emails are sent with no e2e encryption at all.

    Monday, 14-May-2018 12:39:06 UTC from mastodon.zaclys.com permalink
  7. Klaus Jónsson Zimmermann (kzimmermann)'s status on Monday, 26-Feb-2018 02:41:07 UTC Klaus Jónsson Zimmermann Klaus Jónsson Zimmermann
    Just saw #Vivaldi Webmail has now an option for you to upload your private #PGP key there. I wonder if anyone falls for this security BS.
    Monday, 26-Feb-2018 02:41:07 UTC from quitter.se permalink
  8. Björn Schießle 🌍 🇪🇺 (bjoern)'s status on Friday, 02-Feb-2018 15:19:37 UTC Björn Schießle 🌍 🇪🇺 Björn Schießle 🌍 🇪🇺

    Das Ende von De-Mail könnte die Forderung nach "einfachen und sicheren Lösungen für die elektronische Identifizierung und Ende-zu- Ende-Verschlüsselung" einleuten. Es soll auf verbreitete Standards wie PGP oder S/MIME umgesattelt werden, so die"AG Digital"... Das ist momentan aber auch das einzig positive. https://netzpolitik.org/2018/erster-ueberblick-koalitions-zwischenstand-zu-digitalem/ #groko #pgp #gnupg

    Friday, 02-Feb-2018 15:19:37 UTC from mastodon.social permalink
  9. Klaus Jónsson Zimmermann (alternative acc) (kzimmermann2)'s status on Sunday, 17-Dec-2017 04:33:20 UTC Klaus Jónsson Zimmermann (alternative acc) Klaus Jónsson Zimmermann (alternative acc)
    • Privacy
    Today I had a firsthand experience on teaching someone how to use encrypted email. TL;DR: #PGP is in a horrible state of usability, yet this should not stop you from teaching other people about the principles of !privacy and security.
    Sunday, 17-Dec-2017 04:33:20 UTC from gnusocial.club permalink
  10. Klaus Jónsson Zimmermann (kzimmermann)'s status on Sunday, 17-Dec-2017 04:25:46 UTC Klaus Jónsson Zimmermann Klaus Jónsson Zimmermann
    Creating a new #PGP key this morning took soooo long! I guess that's the cost associated with good security though. Totally worth it.
    Sunday, 17-Dec-2017 04:25:46 UTC from quitter.se permalink
  11. rozzin (rozzin)'s status on Sunday, 21-May-2017 19:16:27 UTC rozzin rozzin
    • Today I Learned...
    • rozzin
    Wow: !TIL that #keybase was founded on a fundamental misunderstanding about how the #PGP / #GnuPG #weboftrust works: http://web.archive.org/web/20141027135352/https://keybase.io/docs/tracking https://lists.gnupg.org/pipermail/gnupg-users/2014-December/051939.html https://www.linux.com/blog/pgp-web-trust-delegated-trust-and-keyservers
    Sunday, 21-May-2017 19:16:27 UTC from status.hackerposse.com permalink
  12. Klaus Jónsson Zimmermann (kzimmermann)'s status on Tuesday, 09-May-2017 18:23:51 UTC Klaus Jónsson Zimmermann Klaus Jónsson Zimmermann
    • Prasanna Venkadesh
    @prashere ah, like I suspected. But hey, alternatives are good, and if #PGP is still the best way to go, other implementations are welcome
    Tuesday, 09-May-2017 18:23:51 UTC from quitter.se permalink
  13. Klaus Jónsson Zimmermann (kzimmermann)'s status on Monday, 08-May-2017 23:28:41 UTC Klaus Jónsson Zimmermann Klaus Jónsson Zimmermann
    Dammit, #K9 mail is failing to decrypt #PGP messages I receive! I don't think it's due to the decryption itself, but rather due to PGP MIME
    Monday, 08-May-2017 23:28:41 UTC from quitter.se permalink
  14. Christmas Personified as a Catgirl (moonman)'s status on Saturday, 08-Apr-2017 21:03:29 UTC Christmas Personified as a Catgirl Christmas Personified as a Catgirl
    (5/?) 
    What are the downsides of #PGP?

    1. It encrypts your data in transit, but it does NOTHING to hide your (for our purposes, pseudonymous) identity, and passive observers, if they have access to the encrypted data, can tell who is talking to who, and when, even if they can't read what's inside the messages. It doesn't hide your "social graph"!
    2. (crypto nerd thing) If someone steals your key, they can decrypt all old messages. Newer systems can prevent this from happening, but PGP is kind of a lowest common denominator for exchanging private stuff.

    These posts will get interesting again soon, I hope. Just trying to make people understand. And again, we are doing this for FUN, with PSEUDONYMOUS IDENTITIES.
    Saturday, 08-Apr-2017 21:03:29 UTC from shitposter.club permalink
  15. Christmas Personified as a Catgirl (moonman)'s status on Saturday, 08-Apr-2017 20:55:38 UTC Christmas Personified as a Catgirl Christmas Personified as a Catgirl
    (4/?)
    Why would I NOT want to use #PGP / participate in #PGPDay

    1. Your abusive government is overtly hostile to crypto users rather than the US standard of being covertly hostile to crypto users, and you could get in serious trouble for using it.
    2. You think you need PGP/strong crypto for purposes which, if revealed could result in death or incarceration. This is a FUN, LOW-RISK BEGINNER'S PGP EXERCISE
    3. You are resistant to pressure from pseudonymous Internet people and have better things to do (lol no you don't.)
    4. You don't like challenges. It's not bad, but it's not a walk in the park either.
    Saturday, 08-Apr-2017 20:55:38 UTC from shitposter.club permalink
  16. Christmas Personified as a Catgirl (moonman)'s status on Saturday, 08-Apr-2017 20:50:57 UTC Christmas Personified as a Catgirl Christmas Personified as a Catgirl
    (3/?)
    Why do I want to use #PGP?

    The answer to this will be limited o the context of #PGPDay, so be aware:

    1. Maybe you want to keep some files on your hard drive encrypted so casual people can't find out what's in them.
    2. Maybe you want to send emails to some of your friends without your ISP, email provider, or anybody listening in on the network between you and your friend. Like, for example, if you are using a social media network that doesn't have (correctly) DMs
    3. "S/he grew his/her neckbeard by three sizes that day" plain old e-peen swinging
    4. The joy of learning something new
    5. Make your parents mad by rebelling in ways that they don't even understand what is happening (GIVE ME YOUR "PRIVATE KEY" YOUNG MAN AND SHOW ME HOW TO WORK THIS DAMN NINTENDO)
    Saturday, 08-Apr-2017 20:50:57 UTC from shitposter.club permalink
  17. Christmas Personified as a Catgirl (moonman)'s status on Saturday, 08-Apr-2017 20:34:57 UTC Christmas Personified as a Catgirl Christmas Personified as a Catgirl
    • Christmas Personified as a Catgirl
    PGP DAY: (1/?)

    1. What is #PGPDay?

    In April 4, 2016 the world experienced an unprecedented event: Through mere peer pressure and boredom, as many as twelve under-20 youths and a handful of older adults willingly and without coercion, successfully installed and used #PGP to communicate. It is believed that this is the largest number of people to correctly install and use PGP in a 24 hour period in the history of the world, and defied claims that it is too hard or not cool.

    In 2017 on the first weekend of April that @moonman is not overwhelmed with work, we honor this day and hope to repeat its success.  https://shitposter.club/attachment/572169
    Saturday, 08-Apr-2017 20:34:57 UTC from shitposter.club permalink
  18. Björn Schießle (bes)'s status on Tuesday, 27-Dec-2016 08:47:45 UTC Björn Schießle Björn Schießle
    Great post-Christmas present. New K-9 Mail version with PGP/MIME support released. https://io.schiessle.org/url/27735 #Android #pgp #k9mail
    Tuesday, 27-Dec-2016 08:47:45 UTC from io.schiessle.org permalink
  19. Björn Schießle (bes)'s status on Tuesday, 20-Dec-2016 21:31:15 UTC Björn Schießle Björn Schießle
    My domain now provides a #PGP web key directory to make it easier to discover my encryption keys, read more https://wiki.gnupg.org/WKD
    Tuesday, 20-Dec-2016 21:31:15 UTC from io.schiessle.org permalink
  20. Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca (bobjonkmanformer)'s status on Tuesday, 13-Dec-2016 23:42:02 UTC Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca
    in reply to
    • GnuPG - GNU Privacy Guard
    • Chris
    @csaurus A message sent to multiple !GnuPG (or #PGP) recipients uses a symmetric key generated for that session to encrypt the message, and then encrypts that symmetric key with the public key for each recipient, creating multiple encrypted key packets. When you receive such a message your GnuPG finds the packet with the symmetric key encrypted to your public key, decrypts it with your private key, then uses the decrypted symmetric key to decrypt the body of the message. The packets encrypted to other public keys are ignored.
    Tuesday, 13-Dec-2016 23:42:02 UTC from sn.jonkman.ca permalink
  • Before

Feeds

  • Activity Streams
  • RSS 1.0
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

Mike Gerwitz's GNU Social Instance is a social network, courtesy of Mike Gerwitz. It runs on GNU social, version 1.2.0-beta4, available under the GNU Affero General Public License.

Creative Commons Attribution-ShareAlike 3.0 Unported All Mike Gerwitz's GNU Social Instance content and data are available under the Creative Commons Attribution-ShareAlike 3.0 Unported license.

Switch to mobile site layout.