Nobody wants snoops peeking at their emails. Unfortunately021 Archives the newly discovered "Efail" vulnerability could make that a possibility.
On Monday morning, the Electronic Frontier Foundation (EFF) reported that Efail is able to expose HTML emails encrypted with PGP and S/MIME encryption programs -- even those that were sent years ago. These tools are commonly employed by journalists, politicians, and other users who require secure communication.
SEE ALSO: Gmail will soon be writing entire emails for you"In a nutshell, Efail abuses active content of HTML emails, for example externally loaded images or styles, to exfiltrate plaintext through requested URLs," the researchers write.
"The attacker changes an encrypted email in a particular way and sends this changed encrypted email to the victim. The victim’s email client decrypts the email and loads any external content, thus exfiltrating the plaintext to the attacker."
In other words, once hackers gain access to your emails, they can use the HTML tags in your emails to prompt mail clients to erroneously decrypt those emails in a way that hackers can access.
So, what should you do?
EFF's recommendation: If you use PGP or S/MIME, disable them, and uninstall the tools that decrypt them.
The security community, however, has claimed these measures aren't necessary.
ProtonMail, for example, claims that many data encryption and decryption services are already patched against Efail. ProtonMail itself has verified that it is not vulnerable to Efail.
This Tweet is currently unavailable. It might be loading or has been removed.
Dan Guido, CEO of security company Trail of Bits, claims that Efail should be very easy for clients and savvy users to detect.
This Tweet is currently unavailable. It might be loading or has been removed.
But if you're still worried, you can always opt for plain-text over HTML emails -- or just use Signal like everyone else.
Topics Cybersecurity
Iris Murdoch’s Gayest Novel by Garth GreenwellRedux: Water Promises Joy and Fear by The Paris ReviewElon Musk's X is letting paid users hide their likesThe Soviet Children Who Survived World War II by Svetlana AlexievichIt’s not just you. ChatGPT is ‘lazier,’ OpenAI confirmed.Google Nest Doorbell deal: $119.99 at AmazonGeorge Plimpton’s Illegal Fireworks Display by The Paris ReviewWriters’ Fridges: Téa Obreht by Téa ObrehtRemembering Toni by The Paris ReviewSigrid Nunez’s Portraits of Animal Intelligence by Peter CameronStaff Picks: From Aphorisms to Zorn by The Paris Review12 sad Christmas songs for your inner emo kidElon Musk's AI assistant Grok roasts its creatorMy Lil Sister Lena by Ebony FlowersHow Stanley Kubrick Staged the Moon Landing by Rich CohenThe Aesthetic Beauty of Math by Karen OlssonBest Garmin deals: Score a Garmin watch for up to 40% off at AmazonBest Nintendo Switch deal: Get Pokémon Brilliant Diamond and Shining Pearl for $30 at GameStopThe Ordinary Woman Theory by Caitlin HorrocksElon Musk's X is letting paid users hide their likes What Makes a Classic Endure? Crossroads of the World by Sadie Stein What a Way to Go! As Dolls to Wanton Kids Happy Birthday to Georges Bataille You Are Quite Unnecessary, Young Man! The Morning News Roundup for September 29, 2014 How Samuel Johnson Celebrated His Sixty Remembering Richard Wright There Are Books a Young Man Should Read by John Wray W. S. Merwin on Sir Thomas Wyatt by Dan Piepenbring The Words Are Everything Typographic Sanity: The Rise and Decline of the Linotype Photographs of Italy’s Abandoned Discotheques Credos by Sadie Stein The Morning News Roundup for August 27, 2014 The Morning News Roundup for September 18, 2014 A Conversation with Matthea Harvey Insure Yourself with William Faulkner Food for Thought
3.2137s , 8206.3203125 kb
Copyright © 2025 Powered by 【2021 Archives】,Defense Information Network