News for hackers. Stuff that matters.
Re:DecryptoCat by zipfle on Thursday July 04, 2013 @12:31PM (#5991364)
If the user is placing their trust in the UX's ability to validate that PGP/GPG is working correctly and has not been tampered with, that sounds exactly like something that could get someone killed.
Re:DecryptoCat by tptacek on Thursday July 04, 2013 @12:40PM (#5991405)
You can say the same thing about any piece of software; if Excel forgets how to multiply numbers, think of the horrible things that could happen! The difference is that multiplying two numbers isn't hard compared to getting a cryptosystem right, and neither is accurately displaying a key fingerprint.