The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 (media.ccc.de)

submitted 1 week ago by modem_down@thebrainbin.org to c/cybersecurity@infosec.pub

12 comments fedilink hide all child comments

Crossposted from https://futurology.today/post/12245375

you are viewing a single comment's thread
view the rest of the comments

[-] ChunderBustickles@piefed.nz 6 points 6 days ago

Please bear with my dumb ass. if validating a certificate / signature is risking an RCE, does that essentially make this a planet-wide potential supply chain hack (wherever gnupg is used, at least?)

[-] ChunderBustickles@piefed.nz 1 points 6 days ago

Follow up: I suppose the verification could be done in a container?

this post was submitted on 26 Sep 2026

28 points (96.7% liked)

cybersecurity

6488 readers

37 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 3 years ago

MODERATORS

shellsharks@infosec.pub

tweedge@infosec.pub