News for hackers. Stuff that matters.
Re:Security by obscurity is underrated by somedude11 on Friday September 11, 2020 @02:56PM (#24446128)
The same with "GnuPG is bad" mantra on hackernews. There is nothing better that GPG currently for all its functionality and the only answer you get when asking for substitute is don't use this function or use some obscure application. Yeah right.
Re:Security by obscurity is underrated by fractionalhare on Friday September 11, 2020 @04:16PM (#24446881)
I agree that there is nothing better than GPG for the narrow scope of encrypting email. But I think there are very few cases where encrypted email is the most secure way to communicate, in lieu of other forms of encryption.
Re:Security by obscurity is underrated by somedude11 on Friday September 11, 2020 @05:38PM (#24447590)
Encrypted email is almost a marginal usage scenario for GPG compared to other uses. It does everything. It is everywhere.Yes it is big, nobody has to use all of it. Just like C++... oh wait it is unpopular on hacker news bubble too despite being a juggernaut of a language. It will still be relevant long after hacker news will be no more.
Re:Security by obscurity is underrated by samatman on Friday September 11, 2020 @06:41PM (#24448073)
I basically use GPG for one thing, at this point: signing git commits.

As far as I know, there isn't another GitHub/GitLab compatible way to do this. So I'll keep using GPG until there is.

Re:Security by obscurity is underrated by wglb on Friday September 11, 2020 @08:09PM (#24448675)
Age is demonstrably better: https://github.com/FiloSottile/age

Also, an informed analysis of PGP: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html

Re:Security by obscurity is underrated by anonymousse1234 on Saturday September 12, 2020 @04:26AM (#24450869)
Informed analysis like lack of forward secrecy in something made for non ephemeral communication - for storing, sending files, digital signatures etc. Or backwards compatibility so you can access and verify your backups, archives etc. from 10 or more years ago.

Show me ephemeral encryption scheme for something that needs to be readable in the future like that.

This analysis is highly uninformed I would say.

Re:Security by obscurity is underrated by aborsy on Saturday September 12, 2020 @06:30AM (#24451415)
It’s not an informed analysis, or even an analysis at all.

That’s not how analyzing algorithms or programs work. Even a basic threat model is missing.