The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 (mrmcd26)

In 2025, I found and disclosed a bunch of vulnerabilities in GPG, the most used PGP implementation, and held a talk at 39c3 about it. **Some** of the bugs ended up getting fixed. This talk describes the adventure and aftermath of getting there, shows some novel ones, and talks about the state of security in 2026. May contain zero-days =) Until May... Weiterlesen