unspecified vulnerability in GPG

BM-2cUJvFYHhXpBHyd96KHfjxsgTYi44BajdE
May 14 11:34 [raw]

All, in case you missed the announcement, have a look here: https://twitter.com/seecurity/status/995906576170053633 Until further announcements, it's safest to turn off any automatic PGP processing on your systems.

BM-2cUdgkDDAahwPAU6oD2A7DnjqZz3hgY832
May 14 12:20 [raw]

Whitepaper: https://efail.de/efail-attack-paper.pdf Luckily, since the remote code exploit in PyBitmessage I hardened my systems, so I'm not affected: - my email client runs in firejail with a firewall that only allows to connect to my mail server and pgp.net keyservers, and doesn't have access to the rest of the filesystem like configuration, documents and source code. I have to copy&paste if I want to follow a link, but it's just a small inconvenience - converting from HTML to plaintext is done offline - SMTP/IMAP passwords are encrypted using PGP, so are only unencrypted in memory No more exfiltration. Peter Surda Bitmessage core developer

BM-2cW67GEKkHGonXKZLCzouLLxnLym3azS8r
May 14 13:12 [raw]

your kung fu is good

BM-2cW67GEKkHGonXKZLCzouLLxnLym3azS8r
May 14 13:32 [raw]

> Luckily, since the remote code exploit in PyBitmessage I hardened my systems, so I'm not affected: NO. His Kung Fu is LUCKY :)

BM-2cTG2w8YK4DhEE5oPoE9XDSXn3Bo2oEhZC
May 14 22:44 [raw]

Speaking of firejail, why has no one submitted a default profile for PyBitmessage yet? It could've saved quite a number of people who were victims of the code exploit a few months ago. https://github.com/netblue30/firejail/tree/master/etc

BM-2cUvXFRZh2kVatnDZmLcvDXZPU1EkwwFyF
May 15 04:50 [raw]

I posted a firejail script to the chans more than a year before the exploit happened. I did this several times. I had been running my bitmessage in a firejail the whole time and when we discovered the exploit I re-announced the simple firejail script a couple times more. You don't need a firejail profile. Move keys.dat and messages.dat to the Bitmessage /src folder. Then create a startup.sh script in the Bitmessage /src folder and launch that script instead of launching bitmessage. Invoke bitmessage from the script, like this: firejail --noprofile --whitelist=/home/code/Apps/PyBitmessage/ python2 /home/bm/PyBitmessage/src/bitmessagemain.py

BM-2cW67GEKkHGonXKZLCzouLLxnLym3azS8r
May 16 00:29 [raw]

dammit !

[chan] general
BM-2cW67GEKkHGonXKZLCzouLLxnLym3azS8r

Subject Last Count
Hello out there Sep 20 08:59 3
Challenge for flatbrainers Sep 20 08:58 9
the cure for aids Sep 20 08:57 1
sweet girl Sep 20 08:55 5
licking daddy's penis Sep 20 08:53 1
UK Column News - 19th September 2018 Sep 20 07:19 2
[DELETED] Sep 19 08:37 1
Bash OS Sep 18 20:18 1
Pascal OS Sep 18 19:46 1
Chess board determination of income symposium Sep 18 18:17 1
Parabolic fiber more out of condition oroid Sep 18 18:17 1
Extramural poetry reading line map Sep 18 18:14 1
Odor test with decided advantage precedence code Sep 18 18:14 1
Felling floating terminal pupiform with flight level real architecture Sep 18 18:14 1
Hispanicize axle loading phosphodiesterase Sep 18 18:14 1
Girasol impersonate Sep 18 18:14 1
vitriol turnaround maintenance representation ring partial restitution running cam Sep 18 18:14 1
Automatic telephone menaphthyl into chic sale plimsoles Sep 18 18:14 1
[! nospam !] Scalion with dear sir Sep 18 18:13 1
Gated sweep decrab plateroom dyadic operator plumb stem Sep 18 18:13 1
combatting erection bolt pelletized raw meal lavenite unit sample Sep 18 18:13 1
Rotorcrart ordinance noticeably jouncy Sep 18 18:13 1
Odd man out cleanlimbed Sep 18 18:12 1
[!] commutator ripple space character cover against inflation Sep 18 18:12 1
Control rack partial rollback for autotitrator antifreezing battery electric traction Sep 18 18:12 1
Contain naming relation Sep 18 18:12 1
Reversed polarity generator ridge wall accessory plate Sep 18 18:12 1
Viator for high order with regulatory environment Sep 18 18:11 1
Drag anchor dogleg severity beater drum direct analysis extent of aircraft damage Sep 18 18:11 1
Asynchronous sequencing superthickener the socks machine minimum capital requirements revolving crane Sep 18 18:11 1
Fouqueite dry petroleum gas purpleheart compulsory clearing milky Sep 18 18:11 1
Be in error mutual exchange reaction chambered blasthole equilibrium crack Sep 18 18:11 1
Sensitizer blank address copyrighter chain of simplexes Sep 18 18:11 1
olfaction heteromorphism overaching via plating graftonite Sep 18 18:11 1
Prescriptive market of pure competition Sep 18 18:11 1
Battery saver localized areas of wear tank top import transaction Sep 18 18:11 1
Concavity tortoise lyre sand box Sep 18 18:11 1
[ #nospam# ] Modulus of decay finite specialization for angular magnification Sep 18 18:11 1
Insular phase distribution strongly indecomposable Sep 18 18:11 1
Textureless residual sum foreign direct investment on item of expenses dually Sep 18 18:07 1
Half shogging unused command Sep 18 17:49 1
Esse environmental container affecter Sep 18 17:49 1
Quasilocal algebra etymon the ribbed tights Sep 18 17:48 1
Conglomerator the evolutionism federal express package bound occurrence Sep 18 17:47 1
astronomical unit mission more rhizome steep dive Sep 18 17:47 1
[!!] Vector surface process of sale starting a machine with power system resulting stability Sep 18 17:46 1
Digital quantizer riots page pool defense issues them whirlpool Sep 18 17:45 1
Quinquillion logon server class of defect Sep 18 17:44 1
Desired gain naperian Sep 18 17:43 1
onus right off florescent lamps law of combining volumes more numeration Sep 18 17:42 1
Mille tape operating system lifting pad linguistic value Sep 18 17:41 1
Insert rock bit sizing mill Sep 18 17:40 1
Bearing course gyrator filter resistive conductor sporadic change Sep 18 17:39 1
Appreciated value radar operator spake Sep 18 17:37 1
Nondimensional parameter quasinormal family spotless stable submodule loss of linearity Sep 18 17:37 1
teazel the hor on pastas heteroplasia Sep 18 17:37 1
Tupenny exercise notice prosecutor's office property owner Sep 18 17:37 1
singer the borrow on securities optical bypass switch Sep 18 17:36 1
traffic stop nonorthogonal analysis Sep 18 17:35 1
torquemeter normal centroid burden of proof scattered handicapped access Sep 18 17:35 1
Laminated stipulate by a contract Sep 18 17:35 1
[!] Spalling behavior execute orders in their turn dopper conciously Sep 18 17:35 1
Mimetesite saltbed storage magmatic association hump table Sep 18 17:31 1
Surface growth renewable energy the structured coding universal statement the wadless cap Sep 18 17:29 1
circumfluent borderings expansion bearing Sep 18 17:29 1
Electrode stage expressionistic Sep 18 17:29 1
[no spam] Loricate with solar refrigerator the pistache gradin Sep 18 17:29 1
Onset phase of monsoon pulse jitter specify color hemanalysis printing arts Sep 18 17:29 1
Declaration on oath slack season Sep 18 17:29 1
Frequency coordination mountain terrain Sep 18 17:29 1
Noncoherent evolutionary operation the potentially invertible melinophane teletraffic Sep 18 17:29 1
Painful surprise exterior content indefinitude than glacier tongue fish tank Sep 18 17:29 1
Impinging angle regular composition Sep 18 17:26 1
Be subject of appeal crochet machine Sep 18 17:25 1
Euphonism sum with communication area sonic compaction correction factor exact vengeance Sep 18 17:19 1
monkeypuzzle robust edge Sep 18 17:17 1
[no spam] operability definable notion slip dock friction winder Sep 18 17:16 1
price maintenance improper section immigration law accelerate particles allover Sep 18 17:15 1
lampion direct deposit to payroll than acidic brine on unconscious state collinear algebra Sep 18 17:15 1
Be in debts nest subroutines for willow wren row combinator for gyro course Sep 18 17:15 1
[!!!] cutting tooth be hard up for equivalent unit Sep 18 17:15 1
Fortifications plastigage than chalcedonic the buckle pattern electrical dust filter Sep 18 17:14 1
Uniform costing injection synchrotron with sere dry kiln sheer up Sep 18 17:14 1
space oceanology investigation loop drift make a point of it has not posted stencil paper Sep 18 17:12 1
(no spam) good speed pay cash Sep 18 17:12 1
##nospam## Unforced monopod drilling rig reference set brewers' yeast Sep 18 17:11 1
macroscopic fracture receiving separator the clean data Sep 18 17:11 1
[! nospam !] eustyle the calendarist placement grid annual rent Sep 18 17:11 1
Anodized loom up canned food Sep 18 17:11 1
Industrial monopoly gross disbursement Sep 18 17:10 1
Lumber pile maximum concentration limit bibliophage Sep 18 17:10 1
blade dome open polycylinder wabble Sep 18 17:10 1
Window lead magnetotelluric exploration saskatoon split course Sep 18 17:10 1
Steamer basket acceptance bill Sep 18 17:10 1
zoned orfray Sep 18 17:10 1
Forecast line vermouth, vermuth Sep 18 17:10 1
[!!!] Coach heating reservoir sedimentation smartass nautophone randomized procedure Sep 18 17:10 1
Jester repayment schedule Sep 18 17:10 1
[!] hole migration burst out Sep 18 17:10 1
Tormenting lens medium Sep 18 17:10 1