Systems, Network, and Administration Podcast. Every two weeks TechSNAP covers the stories that impact those of us in the tech industry, and all of us that follow it. Every episode we dedicate a portion of the show to answer audience questions, discuss best practices, and solving your problems.
https://techsnap.systems
Episode 368: EFail Explained
The EFail hype-train has hit hypersonic speed, we’ll tap the breaks and explain who disclosed it, what it is, what it’s not, our recommendations, and early reactions.
Plus things to consider when deciding on-premises vs a cloud deployment, and the all business gadget from 1971 that kicked off the consumer electronics revolution.
Links:
- The HP-35 — Consumer Electronics, an Origin Story
- The people cost of building out a Kubernetes cluster on-prem | Operos
- EFAIL — EFAIL describes vulnerabilities in the end-to-end encryption technologies OpenPGP and S/MIME that leak the plaintext of encrypted emails.
- efail-attack-paper.pdf
- GnuPG Efail press release Response
- No, PGP is not broken, not even with the Efail vulnerabilities - ProtonMail Blog — Recently, news broke about potential vulnerabilities in PGP, dubbed Efail. However, despite reports to the contrary, PGP is not actually broken, as we will explain in this post.
- Eric's War Story is VERY Familiar
- When it rains it pours for Steve
- Critical Cisco WebEx Bug Allows Remote Code Execution
- Cisco WebEx and 3rd Party Support Utilities